Fatal[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fatal.exe
Size

15.9MB
MD5

661851fa540a3b473fdd163951667efd
SHA1

f52ea4e0409847613e032415184c55a99d7ed993
SHA256

c8dd4d9bff02fbfeb66143a54dee1ad47888a545963f29a9fa8bd10ee25f055e
SHA512

ef98feaba893c13fd91940a1800dcb324f695762f3b77bccdcdde297ea88698b982afd2ec3ac9ad15115ae7ec2d81c0186a68909dea3a7bed2a99bc43c281c29
SSDEEP

393216:kuHfzcetPsC/GA+Nlyhpf13fJSMKZW6TmgkS:kCfzce9s4GxPYR13sMg3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fatal.exe

Files

Fatal.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lord0
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lord1
Size: 15.9MB - Virtual size: 15.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ