SetRes[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SetRes.exe
Size

21KB
MD5

925259a782a16bf83059a5d255290ca5
SHA1

13d3a63456562d334c09a76297bbabe273eedc2f
SHA256

f8d0d3b1ad4fe049c0d4f865f521c6b09a94ba321fbc96aa50cae1afa802aad6
SHA512

cde9b0288ee6d2aed61cd492aade55e353da3e0bfbb8b2119aa77dc7c2a24eaa522d337c50b746409fbbf3a5c2419ee79f16c5d101fedeee97709fb49527d058
SSDEEP

192:imHmg+FkdZW/DRzU4ZoHulA3nqEEFEOvIf3MoZmUjNTSqlabmrayF73bgcCD6O:83k/W/DK9wA3qE7OvaNTlYYl53bgr+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SetRes.exe

Files

SetRes.exe
.exe windows:4 windows x86

ae8db48a2a97b8c28edf6c7601fa09b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
Beep
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

_getch
_kbhit
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_strupr
abort
atexit
atoi
exit
fflush
fprintf
free
malloc
printf
puts
signal

user32

ChangeDisplaySettingsA
EnumDisplaySettingsA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE