Firefox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Firefox.exe
Size

465KB
MD5

406cecd2b90ae571a412ebf8336c0a67
SHA1

69c970cbf3c4444f0e650b1a09d97bf2a46bab41
SHA256

63bed357b0cfdec78e55234fb491ea8dfb0cb88d97d42f1ba43e94fc9061366c
SHA512

a6478e80514a4ab734084dda5069289acd7ffcb7ebe0d2fae64fb2cc23c2a2407946b5b81bb8486bd92fc482f9fc2fa5b12bbbea6593233b20c0db22699e9760
SSDEEP

6144:uuggNWvDDWtI4svDIQhpbXbtB1E4tWUO5wc0X2DhBrkHdjoXEgoQxbOYeAarf:fgeWvDqO4s7hhlXhBHtWpih22qSAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Firefox.exe

Files

Firefox.exe
.exe windows:5 windows x64 arch:x64

caa5e6a2892587c2324418efee31c648

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

user32

GetDC

gdi32

BitBlt

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 388KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE