sapphire[.]ofx[.]6[.]10-patch64[.]exe | Triage

Sharing

General

Target

sapphire.ofx.6.10-patch64.exe
Size

994KB
MD5

db37165c758b304d69e3d09973fdfe71
SHA1

691e28795cd320d3176b579967356ad83a17d7dc
SHA256

90b3492bccc79a9f81caf0d7832d63dce4d5b8905d2e6aef90f6ca57c9662671
SHA512

8dc5bb6c5bf376dfbdccb95b9a6efa18d156c610237d029d55a46e2897fa51b6212651c988070f85078b4b98cef9079fa02207bcf6acecf679046739ffc1217b
SSDEEP

24576:mU92cIO2Gq+59y/odfRO+KUOdC5X46hXyVDkryBIh5K4IHRP:mC2cL2/AdfRO+cezy21h5kR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sapphire.ofx.6.10-patch64.exe

Files

sapphire.ofx.6.10-patch64.exe
.exe windows:5 windows x86 arch:x86

Password: 123

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 970KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE