teorex[.]inpaint[.]v[.]9[.]x-patch[.]exe | Triage

Sharing

General

Target

teorex.inpaint.v.9.x-patch.exe
Size

728KB
MD5

d11576bde8d9612f9091a794a34333d5
SHA1

bb302001f46d7e0135f5fa4214d8ec68faf94346
SHA256

239f2eefa901dd6ffe3d816a8566118a873c38f74050d2c2610c258286298949
SHA512

e89de1eb245dc975966a9d7ae782b2497ba5ba53758b2d672840ff1881e07b5d9cc17158e8cd0d5e66c93416baf149b163c44ade016abf2662bc7cffee34f7c2
SSDEEP

12288:lEW3Nr3HrAL5Ie8q3K7nRFOg11MclJbywhs6kSeysUVw/dIW2x+VkwWSpF0tg3UR:nNr3LKdd3K7nJ1WUJuqyV0y+twWSpF5Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
teorex.inpaint.v.9.x-patch.exe

Files

teorex.inpaint.v.9.x-patch.exe
.exe windows x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ