DrFoneForiOS_Patch_v1[.]1_URET[.]exe | Triage

Sharing

General

Target

DrFoneForiOS_Patch_v1.1_URET.exe
Size

488KB
MD5

5c92e3ebc93638dd52cfaa84cc987b01
SHA1

154617d38f14699b4e50ebcbb055dcf5b743c012
SHA256

0c55c35db497d802c46baf9daeb1fe0c0283f21697497b4c07d8892d2c775376
SHA512

5dfc9dd9027e8f807418274131cc8058f076dd048b2aa585f2cdf9e6f9d04053d9857485bf744511c30c2616955e0dba14bc6f745b60efd9389cdacdebf5e591
SSDEEP

6144:jvaWABA523O75vnr2QwRrNegPV1lMgUKNCf1bv6F4MBoeN:baWoMzwXeWmgUKQdv6FzBoq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DrFoneForiOS_Patch_v1.1_URET.exe

Files

DrFoneForiOS_Patch_v1.1_URET.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DrFoneForiOS_Patch_DFoX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ