FUCK[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
FUCK.exe
Size 2.3MB
Sample260730-t3mkvscc68
SHA256 691b137ae974fdc240a22be26696ffe90468bf13fca23a0924ca71e4c9d03ab5
MD5 7effbdabc1e7d976f8483020664f312d
SHA1 dc58c5d65963f9773f0cbd4681181bf5350c9b90
SHA512 78053e280cb0986bb55f729b849f2f6040bb9602d3cad7a99d82e44cd1497773d7b0152b28dc748c261f6e147c9f6bd9f98f4b436a3da67aaf2fbb94772d5c6a
SSDEEP 49152:z3z11C2O6MtGKiK6bmviJ+2tQjG6P9WcafwL5KyR8mX0oNRX6o1K+ijq:zR1+kKjf2tZ611afwKyR8KHNRXfQ3jq
TLSH
T1B8B5334467F29610C2E6EABC4AA2FF0915BDFCD2C344DB1F0EA70C7A5B3B2295C15A45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FUCK.exe

File Explorer

FUCK.exe

.exe 2.3MB

FUCK.exe

SHA256 691b137ae974fdc240a22be26696ffe90468bf13fca23a0924ca71e4c9d03ab5
MD5 7effbdabc1e7d976f8483020664f312d
SHA1 dc58c5d65963f9773f0cbd4681181bf5350c9b90
SHA512 78053e280cb0986bb55f729b849f2f6040bb9602d3cad7a99d82e44cd1497773d7b0152b28dc748c261f6e147c9f6bd9f98f4b436a3da67aaf2fbb94772d5c6a
SSDEEP 49152:z3z11C2O6MtGKiK6bmviJ+2tQjG6P9WcafwL5KyR8mX0oNRX6o1K+ijq:zR1+kKjf2tZ611afwKyR8KHNRXfQ3jq
TLSH
T1B8B5334467F29610C2E6EABC4AA2FF0915BDFCD2C344DB1F0EA70C7A5B3B2295C15A45
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Desktop\FUCK\FUCK\obj\x64\Release\FUCK.pdb