bdf2ttf[.]exe | Triage

Resubmissions

07-11-2023 19:29

231107-x7grysga82 3

07-11-2023 19:26

231107-x5kqtsga52 3

Sharing

General

Target

bdf2ttf.exe
Size

24KB
MD5

e468d8706bce7a3cd837d60367f4a7a5
SHA1

53bdf9884422e8ae1ff33654724e88ea47a4c9bd
SHA256

9a15ec6f5b2e3f666400060d85f578da48ccef787521b25eeb25bd30376dd11d
SHA512

313bb38b9807271bdfacb457d2378e1764bd0a21bf56e9eaa2aaf1dd4a661d7b3b467f73b0febd5f10ec835088acb29676090341f0b1b9d45c53279ea96e38d7
SSDEEP

384:DruatT9xJteDTOy40USnrMJpOqy0MDhiFZEzSHnMsYhaJqdwSfx3bMbbmVWgMLlV:DaUJYDiyRUSep19vHMsYoqffmb6WgWAq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf2ttf.exe

Files

bdf2ttf.exe
.exe windows:4 windows x86

2fb92042bce9f8c73c2ab6c1d3dd334d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

isspace
isgraph
strncmp
isdigit
atoi
toupper
getenv
sprintf
fprintf
_iob
fgets
fclose
fopen
qsort
realloc
malloc
fwrite
fseek
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
free
putc
sscanf
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strchr
calloc
_strdup

kernel32

GetModuleHandleA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE