Fulloption_V2[.]1[.]exe | Triage

Sharing

General

Target

Fulloption_V2.1.exe
Size

4.2MB
MD5

9f53cc8bc6cb459cb3c5ccc0d54812d6
SHA1

f18cda32845d3daecf694457a92f614931695c50
SHA256

aa1a013b0b9dba1edcac0096c8bd847cf50126cc719e5ec8e1d7311ef37b97f8
SHA512

0047d8a7035148466f6b52ff7c9ea85d72075bbcda891192aedef0e2c2a18e1f90697cef7b5f5558a973e5214d754b483da2f35331974a521f7dbab5391c562a
SSDEEP

98304:0er3mJdJ0Gz+yQ3zkgHC3lD1qhPEeXkZGRaGxOJx1/qV:JSJdJrz+yOkg8BQPfXYoI1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fulloption_V2.1.exe

Files

Fulloption_V2.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ