FullOption_2[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FullOption_2.1.exe
Size

4.0MB
MD5

9ec7934c2dd0ea95b8a3f7081ae2b9fa
SHA1

4e6807ebbee7490d2188fe1b3332a0a5cec053b0
SHA256

518bcb384a8be295dacd2516beaaf18dd8b0c081bcb7bdc4a66bb27b393bf97b
SHA512

a6d8fab2a3a6e9ab4ddfa81dffa1105c34dfd9cb3ae8093c475465f02678dc288935a866df060605163f1733afb0ee6d7f8e6515e6d4bfd457c1c8d38f613bfd
SSDEEP

98304:9rN+Jkbu8xFUvvU8nbRg3F7Nc1/m7XDjPzeLDRfF:xNZbXxeHU8bK17C/m7XDjzeLDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FullOption_2.1.exe

Files

FullOption_2.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ