fontview[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fontview.exe
Size

107KB
MD5

9b8b5487536052919900017ef778a88b
SHA1

36c68e6e0edcb86a7773cb232d531a5a8434be76
SHA256

16dbfc579fb6990745d48969f82927037209c028fd8e9f6b8017b32602209387
SHA512

8e5a575f95959219cd72512e40c599b0c8ceafee672d7b327eb851633e4e7055b95bd03a4e7ae2dab90b6cb062778d056825ff1903d7d019c72b334f03640a4c
SSDEEP

1536:UzybmukAytMZOt3IWjWffRkOMwXFN1HKwtf11lSn42yD/c/znD1gvvUGmGPzOtSL:QiiFNJjWRkOtHxtt3EOL2QvIsitSYVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fontview.exe

Files

fontview.exe
.exe windows:6 windows x64

acd35c4707ac88c5994758d5cf903207

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

kernel32

LocalAlloc
GetLastError
FormatMessageW
MultiByteToWideChar
GetSystemDefaultLangID
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
QueryPerformanceCounter
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
CreateFileW
MulDiv
Sleep
LocalFree
lstrlenW
ExitProcess
GetCommandLineW
HeapSetInformation
GetProcAddress
LoadLibraryW
FreeLibrary
GetACP

gdi32

ExtTextOutW
GetLayout
EndDoc
EndPage
StartPage
StartDocW
LineTo
MoveToEx
CreateCompatibleDC
TranslateCharsetInfo
CreateFontIndirectW
SelectObject
GetTextCharsetInfo
DeleteObject
DeleteDC
AddFontResourceExW
RemoveFontResourceExW
GetDeviceCaps
AddFontResourceW
GetFontResourceInfoW
GetFontData
RemoveFontResourceW
SetTextAlign
SetTextColor
SetBkMode
GetTextExtentPoint32W
GetTextMetricsW

user32

SetScrollInfo
PostMessageW
ScrollWindowEx
InvalidateRect
SetCursor
MessageBeep
GetDesktopWindow
MessageBoxW
BeginPaint
DefWindowProcW
SetRect
SetWindowTextW
GetSysColor
CharNextW
GetSystemMetrics
DrawTextW
LoadStringW
SystemParametersInfoW
RegisterClassW
GetSysColorBrush
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
PostQuitMessage
DestroyWindow
SetWindowPos
SendMessageW
EndPaint
GetClientRect
FillRect
LoadAcceleratorsW
EnableWindow
GetNextDlgTabItem
SetFocus
GetFocus
GetDlgItem
IsDlgButtonChecked
CreateWindowExW

msvcrt

_fmode
_vsnwprintf
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
exit
?terminate@@YAXXZ
_commode
memset
_acmdln
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
_cexit
_exit

comdlg32

PrintDlgW

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathRenameExtensionW
PathFindExtensionW
ord158
PathAppendW

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acd35c4707ac88c5994758d5cf903207

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comdlg32

shlwapi

ole32

ntdll

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 1024B - Virtual size: 4KB

.pdata Size: 1024B - Virtual size: 564B

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 512B - Virtual size: 36B

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 1024B - Virtual size: 4KB

.pdata
Size: 1024B - Virtual size: 564B

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 512B - Virtual size: 36B