SecurityAntiGrabber[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecurityAntiGrabber.exe
Size

1.6MB
MD5

35dd123aba432a099b335baca770623f
SHA1

18a0a3ce6eb737392454a62ff4967c8a44bcb7ce
SHA256

9ff7510becdcb2610bd668dc18b0d5d4cec576eeb8b54a12a29e438b0fd1f799
SHA512

1eb24758387a5cb59af1ce02052b9d145d8875a6eb47a5cfa380882e191a0c74304a7e1baeba0ec95863ff8925cc013a9f571a1fb26bd7cda3abe7a17994b269
SSDEEP

49152:LDyVmlzSKYavnymKeg6rDURscWun8nGh:LDDHYa/ymKegpRn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecurityAntiGrabber.exe

Files

SecurityAntiGrabber.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ