System8[.]MessageBox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

System8.MessageBox.exe
Size

43KB
MD5

489cb1e6c45ce315b896e6a41d0ecbe6
SHA1

b7650c5b5dc7818587fb19ef5c78fa4ee61235ca
SHA256

025bee46e67135d8eebf416547e35ac29f49b668fa2d4f1a1d21b04bd0811e60
SHA512

fffd24ad92c3653da6ff187b0f4793ad2ef3cddf2cee9bebccf8b7507ce47832639eb79589a5add129f7891ffdc86927ec35cd2cf0686eacbc29ae4a361ebc79
SSDEEP

768:w1O4iAgzkHIkaR0wmpBgG/2xbicK7YcEtUIH18+uhdvfD:iOy1JGA7CP1Y9D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System8.MessageBox.exe

Files

System8.MessageBox.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ