FileZilla[.]exe | Triage

Sharing

General

Target

FileZilla.exe
Size

7.2MB
MD5

918e047b10406de6800a08b5371fa1f1
SHA1

4a622107863063db735d3965b2d59c935c6b0850
SHA256

552d75f30ac9574391c0f9e0602efcc24d494a118da7eb27310fb3a48314ddfa
SHA512

ea49ac5b2a8c565fb81208f5e367bca9f65a97ab5a7473833de7ed33b9bf539013667ec808714ba913d68a56136370e7b78af363275f5fb2f63948a41d2f632e
SSDEEP

49152:Id+YSEnLRdsmOdjmkxmdf6GtQLAhaYSKiNy4kpU0ycC:4+YSEnNdiBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FileZilla.exe

Files

FileZilla.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data
.rdata
.reloc
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5
.png
.rsrc/MANIFEST/1
.xml
.rsrc/version.txt
.text