Fisch Macro IRUS[.]exe | Triage

Sharing

General

Target

Fisch Macro IRUS.exe
Size

381KB
MD5

a16d1affbbc71808d1123b120a84dbd9
SHA1

01b6c9e2d561d8be0098ddef06f57652f5006483
SHA256

30a99f0c9acd05ac7a54c1a617aa95c5a28da095e4dfc511da0dc1512222f9a8
SHA512

26f60227c53204e1ab74f253e50d0bdf6a8aadbd3f7ae457718f8239e79e78462de4cefa19af427ccdc826c8b3e8fdfb563b088619c08f169dba391990f93854
SSDEEP

6144:tgq9BXg2Gkza5+XMFxScM6KtLvlQPq2vip+Pw4n8olM3jmNmLxTm:t9BXTGr5+8FvKtzlBiPoNTmNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fisch Macro IRUS.exe

Files

Fisch Macro IRUS.exe
.exe windows:5 windows x86 arch:x86

1343ca50d234527bf272645d6db0664b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

wininet

InternetOpenW

user32

GetDC

gdi32

BitBlt

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

OleLoadPicture

Sections

.MPRESS1
Size: 339KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE