Image Grabber[.]exe | Triage

Sharing

General

Target

Image Grabber.exe
Size

7.8MB
MD5

5fb80d4c211d744d3f520bd12cd94929
SHA1

f350e068add9decec28327de46a64bcbbf660833
SHA256

1d5ac30c1ffff28a1e7390388038c31604e5c2d5892e1c010ccf6b979e7d58e7
SHA512

c818a49b1a92f85672a37b9a1ba199ea0110b6fb7c33c35b8bacaa1feba0e5f3a95e0ede75d675216ffc77e871c1e02c01e2cd6710299c0dc334d7fa3b5bf1b5
SSDEEP

49152:Z5+co07I46qUVuy0xChRbmlQq41Pmnhaoj2iA0kMaFqIRnDFJojyGZd77OVnTE6W:ZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Image Grabber.exe

Files

Image Grabber.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ