fontcore[.]png | Triage™

General

Target
fontcore.png
Size 119KB
Sample260806-2fhmdssake
SHA256 e90ef3456e0164a595a31b12db97172dd0683b1963e28d40294660d8b39bbbbf
MD5 c21a177ac8581b403619f377d8324229
SHA1 5c548473cae313691b96b64ebbc90b1e2515a3e6
SHA512 6693e2f4b53bae1de90c077dcd724010a262313404bc16a4e0f5d744c985dda2af3c712c572285c227b5649fc99d1235cfed028ebd125f21bbe42e2fab147032
SSDEEP 3072:ZkKo/lpmXyv3XCqqYfejvMi05jC4Lyo5:Wrzv3XCbv8uq
TLSH
T133C36C2BB3B541BBD47B8274C8A35A05D3B6F4600721ABDF0764069A1F277E19D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fontcore.png

File Explorer

fontcore.png

.dll 119KB

fontcore.png

IMPHASH aa32b9f575d361e597278ee503e147eb
SHA256 e90ef3456e0164a595a31b12db97172dd0683b1963e28d40294660d8b39bbbbf
MD5 c21a177ac8581b403619f377d8324229
SHA1 5c548473cae313691b96b64ebbc90b1e2515a3e6
SHA512 6693e2f4b53bae1de90c077dcd724010a262313404bc16a4e0f5d744c985dda2af3c712c572285c227b5649fc99d1235cfed028ebd125f21bbe42e2fab147032
SSDEEP 3072:ZkKo/lpmXyv3XCqqYfejvMi05jC4Lyo5:Wrzv3XCbv8uq
TLSH
T133C36C2BB3B541BBD47B8274C8A35A05D3B6F4600721ABDF0764069A1F277E19D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16364

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Java_com_water_auth_NativeAuth_nativeFingerprint Java_com_water_auth_NativeAuth_verify Java_com_water_auth_NativeAuth_verifySigned Java_your_gay_session_SessionProof000_checkRemoteServerNative Java_your_gay_session_SessionProof000_validateNativeImageNative Java_your_gay_session_SessionProof013_checkRemoteServerNative Java_your_gay_session_SessionProof013_validateNativeImageNative Java_your_gay_session_SessionProof027_checkRemoteServerNative Java_your_gay_session_SessionProof027_validateNativeImageNative Java_your_gay_session_SessionProof041_checkRemoteServerNative Java_your_gay_session_SessionProof041_validateNativeImageNative Java_your_gay_session_SessionProof058_checkRemoteServerNative Java_your_gay_session_SessionProof058_validateNativeImageNative Java_your_gay_session_SessionProof073_checkRemoteServerNative Java_your_gay_session_SessionProof073_validateNativeImageNative Java_your_gay_session_SessionProof096_checkRemoteServerNative Java_your_gay_session_SessionProof096_validateNativeImageNative Java_your_gay_session_SessionProof127_checkRemoteServerNative Java_your_gay_session_SessionProof127_validateNativeImageNative Java_your_gay_session_SessionProof159_checkRemoteServerNative Java_your_gay_session_SessionProof159_validateNativeImageNative Java_your_gay_session_SessionProof188_checkRemoteServerNative Java_your_gay_session_SessionProof188_validateNativeImageNative Java_your_gay_session_SessionProof211_checkRemoteServerNative Java_your_gay_session_SessionProof211_validateNativeImageNative Java_your_gay_session_SessionProof255_checkRemoteServerNative Java_your_gay_session_SessionProof255_validateNativeImageNative Java_your_gay_session_SessionProof301_checkRemoteServerNative Java_your_gay_session_SessionProof301_validateNativeImageNative Java_your_gay_session_SessionProof333_checkRemoteServerNative Java_your_gay_session_SessionProof333_validateNativeImageNative Java_your_gay_session_SessionProof366_checkRemoteServerNative Java_your_gay_session_SessionProof366_validateNativeImageNative Java_your_gay_session_SessionProof383_checkRemoteServerNative Java_your_gay_session_SessionProof383_validateNativeImageNative

fontcore.png

kernel32

generic

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

fontcore.png

kernel32

generic