sapphire[.]ofx[.]6[.]10-patch32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sapphire.ofx.6.10-patch32.exe
Size

990KB
MD5

3b4f39c0fdebd4e695d4cd4a0b94dbf4
SHA1

5b20c94dcaccc0aa09ecf160b86a2fe76e2cc3d6
SHA256

9d5a68def776de4f186d86b76c09422c392cfdca8092f4028e1a7e44e3af6de6
SHA512

4b13ab064aed60a354e0a8af0bb22e08eaad83bae97a0e0999ea56df73698bd93c1a4966d61dc5484b8dd6a7fc1fa066c7388c21dd6a418cf3eaf56f4e8932ce
SSDEEP

24576:mHi5wlFrrVzuyxbB0Yk+9YDrQZG/FsKSkVTRCmUpx4bIYzSatzWC:mtlFFuytB0YPnZQpBVTuP4bTzSszWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sapphire.ofx.6.10-patch32.exe

Files

sapphire.ofx.6.10-patch32.exe
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 966KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE