AnsiStringCodeConverter[.]ZIP | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AnsiStringCodeConverter.ZIP
Size

255KB
MD5

3aa0d76447098d72fdec2c518546809d
SHA1

737d3a523c051c77adf69bef0411341b57c55517
SHA256

b4b748865ff68255321cfbb6a9b5d7d9c1a9c357da4c54eb5fb9413f93cfc995
SHA512

c58a20ef02c3960605245dcf22e9680cee2e6bbf6366a743bdc62ff3db56ddf2b097ccff99e2512a584565c23ccf5325d4280ecc96ea5637361b4679afbbce35
SSDEEP

6144:MZKJ7JU9HVDg+LCgF4dcWu43JrshH+xgOtvDXjQB:PJFU9HJLCgF4d7xUegevbjQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DelphiStringToAnsiStringConverter.exe

Files

AnsiStringCodeConverter.ZIP
.zip
AnsiStringConfg.pas
AnsiStringConvFunctions.pas
AnsiStringConvObj.pas
AnsiStringMainForm.ddp
AnsiStringMainForm.dfm
AnsiStringMainForm.pas
DelphiStringToAnsiStringConverter.Ini
DelphiStringToAnsiStringConverter.cfg
DelphiStringToAnsiStringConverter.dof
DelphiStringToAnsiStringConverter.dpr
DelphiStringToAnsiStringConverter.dsk
DelphiStringToAnsiStringConverter.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DelphiStringToAnsiStringConverter.res
ISDelphi2009Adjust.pas
ISDlgOpenDirectory.ddp
ISDlgOpenDirectory.dfm
ISDlgOpenDirectory.pas
Readme.txt