FNCheat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FNCheat.exe
Size

3.8MB
MD5

4284b1583582466703bec8abcc0ea228
SHA1

223d1b6b6adc972b6f05fddea21700e6016e89ba
SHA256

859fee205eb5c4e1976f2c51e6d4080b49565cf43788bcbe939ee811d6860854
SHA512

8b22d89a0f3054c34420b1abf312b149a8685f1b4d227e1a65e6ffe9396cc2d0bb982d801af02615c6525e5ebeed2e78c7b6c5309cfd337b7e82b3ed1bdb55d9
SSDEEP

98304:eELKw+mpvKLfxxGxLpdQ0rV2rMZemfz9/RS/k672:HwmaGxLLQ0rV2rMJfz9/0/kA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNCheat.exe

Files

FNCheat.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 569KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 80KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 36KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 275B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 569KB - Virtual size: 1.7MB

.text Size: 80KB - Virtual size: 198KB

.text Size: 36KB - Virtual size: 156KB

.text Size: 31KB - Virtual size: 62KB

.text Size: 137B - Virtual size: 244B

.text Size: 275B - Virtual size: 488B

.text Size: 2KB - Virtual size: 6KB

.text Size: 512B - Virtual size: 4KB

.text Size: 512B - Virtual size: 4KB

.text Size: 512B - Virtual size: 4KB

.text Size: - Virtual size: 5.5MB

.text Size: 3.1MB - Virtual size: 3.1MB

.text Size: 16B - Virtual size: 4KB

.text
Size: 569KB - Virtual size: 1.7MB

.text
Size: 80KB - Virtual size: 198KB

.text
Size: 36KB - Virtual size: 156KB

.text
Size: 31KB - Virtual size: 62KB

.text
Size: 137B - Virtual size: 244B

.text
Size: 275B - Virtual size: 488B

.text
Size: 2KB - Virtual size: 6KB

.text
Size: 512B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 4KB

.text
Size: - Virtual size: 5.5MB

.text
Size: 3.1MB - Virtual size: 3.1MB

.text
Size: 16B - Virtual size: 4KB