toolbox[.]exe | Triage

Sharing

General

Target

toolbox.exe
Size

392KB
MD5

5455b156bdca383b7d64a2bfbae30075
SHA1

cf84ce4bbf92975a49cb00f23467fc9a423c3fb0
SHA256

00b254bb7839546c189db56ac5aaafdff497170d5562101309e585114eeb12c8
SHA512

5c994eec99b6999f87e84dc2c1a11be90b03494a936c67794a1609f066fef1ff48f83cf9f1afd87f8fb32ee7c2c44689ab47b5ff6f5eaaca39ec99d70db8569f
SSDEEP

6144:46tro1u73BSMKUbi0J/QpFzw2o5EA5W7J6uftd4FXIIv+caadL7On+IMcV:vD3FKLpFzw2MWB4Fa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
toolbox.exe

Files

toolbox.exe
.exe windows:4 windows x86 arch:x86

6304cdd45511a64b6aa88220f5725512

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
scanf
signal
system

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_MEM_DISCARDABLE