resumefix[.]exe | Triage

Sharing

General

Target

resumefix.exe
Size

5KB
MD5

2570651f89822b7754eac559c642ea48
SHA1

b70502db4d1670c2896ad433a7c2b488ea30b384
SHA256

5ccba1800f3a1b136450f9d4b4096dfd9a1e9d39268257d922bf7a224e259d6f
SHA512

9bb15699f7f06e95396b03caa4ad3e9bb1cf4e5a6558af262832457c33f9d66e275f657341de97dd2bb3c58bf1e8ffbfce600d4523890f18abac5caaebf53464
SSDEEP

96:j0vx2alSqu5Uwk1P7eDDGmlA/XPU10kvaf:Q8ahuew47eOx/G0kO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
resumefix.exe

Files

resumefix.exe
.exe windows:4 windows x86

836d43771ced55b02a4debfd79e62f9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetModuleHandleA
GetLastError
DeviceIoControl
CloseHandle
CreateFileA
GetStartupInfoA

user32

DestroyWindow
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

msvcrt

sscanf
__getmainargs
_initterm
_acmdln
_controlfp
sprintf
_except_handler3
_ftol
_exit
_XcptFilter
exit
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ