fontview[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fontview.exe
Size

114KB
MD5

c0c7edc832b28a2755652c2c0423afe7
SHA1

a3d17225de30b09d6ee15579018862286f24740b
SHA256

f4deaf34b4d7f51fec469ad465054d1bea158c5d2bbd3adf017beda82cb3eeaf
SHA512

b101356e10c4ef44a924afb2d193b041570ef96ad87c8255d270b0c6cf6ec390513feb3407ebcda3d5ffe8b8e2a2ad720298fe7e21b5276e9be5df57f065613f
SSDEEP

3072:I/BD7pQFGkNJjWRkOtHxtt3EOL2QvIsitSYV6:sD7UG0WRRZzqGY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fontview.exe

Files

fontview.exe
.exe windows x86

45c6dec368899af38b3c2f1bd3e62e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetSystemDefaultLangID
CloseHandle
MulDiv
LocalFree
GetLastError
LocalAlloc
ExitProcess
GetACP
FreeLibrary
CreateFileW
FormatMessageW
lstrlenW
GetCommandLineW
HeapSetInformation
LoadLibraryW
GetProcAddress

gdi32

ExtTextOutW
GetLayout
GetFontRealizationInfo
EndDoc
EndPage
StartPage
StartDocW
LineTo
RemoveFontResourceW
CreateCompatibleDC
TranslateCharsetInfo
CreateFontIndirectW
SelectObject
GetTextCharsetInfo
DeleteObject
DeleteDC
AddFontResourceExW
RemoveFontResourceExW
GetDeviceCaps
GetFontResourceInfoW
GetFontData
SetTextAlign
SetTextColor
SetBkMode
GetTextExtentPoint32W
GetTextMetricsW
MoveToEx

user32

GetSysColor
SetWindowTextW
SetRect
GetClientRect
BeginPaint
FillRect
EndPaint
SendMessageW
SetWindowPos
DestroyWindow
PostQuitMessage
DefWindowProcW
SetScrollInfo
PostMessageW
ScrollWindowEx
InvalidateRect
SetCursor
GetSystemMetrics
DrawTextW
LoadStringW
SystemParametersInfoW
CreateWindowExW
RegisterClassW
GetSysColorBrush
LoadCursorW
LoadIconW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
EnableWindow
GetNextDlgTabItem
CharNextW
SetFocus
GetFocus
GetDlgItem
MessageBoxW
GetDesktopWindow
MessageBeep
DispatchMessageW

msvcrt

__setusermatherr
_controlfp
_except_handler4_common
_initterm
_unlock
exit
__p__fmode
__dllonexit
_acmdln
_cexit
?terminate@@YAXXZ
_lock
_exit
_ismbblead
_onexit
__set_app_type
__getmainargs
__p__commode
_XcptFilter
_vsnwprintf
_ftol2_sse
_amsg_exit
memcpy_s
memset

shlwapi

PathAppendW
ord158
PathFindExtensionW
PathRenameExtensionW
PathFindFileNameW
PathRemoveFileSpecW

api-ms-win-core-com-l1-1-0

CoInitializeEx
CoUninitialize
CoCreateInstance

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetStartupInfoW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-synch-l1-1-0

CreateMutexExW
CreateSemaphoreExW
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

comdlg32

PrintDlgW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45c6dec368899af38b3c2f1bd3e62e67

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

msvcrt

shlwapi

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-debug-l1-1-0

comdlg32

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 1024B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 1024B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 2KB - Virtual size: 1KB