ftim,lftftgtygyhy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ftim,lftftgtygyhy.exe
Size

172KB
MD5

280642f39565094ffc222756ef38229a
SHA1

7ce0bb3689af3e8e0910822ce11b7ade9c72ca98
SHA256

c76e3e2ef4a2a3b65a15b0a47b32cc9abc4cb62a90ad3ca0ab4773d79ee6c93c
SHA512

86c08bdddbe8abfd72d73760120213ab6f2537348d59590437715887370834fb552fd9a5f5b43912ae0913d3bece7d8c537217c6b675c74c02c157072418df1d
SSDEEP

3072:rAvpP/9F/ix/A9wXnDLn1mFbTYGtdGt3WzZb29b/ztkV0rsEM:6/9FO/AmL1mFbckdGtmzYR/zWTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ftim,lftftgtygyhy.exe

Files

ftim,lftftgtygyhy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ