F:\css\source\repos\GrabberBuilder\GrabberBuilder\obj\Release\GrabberBuilder.pdb
Overview
overview
3Static
static
3Unconfirme...48.rar
windows7-x64
3Unconfirme...48.rar
windows10-2004-x64
3GrabberBuilder.exe
windows7-x64
3GrabberBuilder.exe
windows10-2004-x64
3MetroFrame...ts.dll
windows7-x64
1MetroFrame...ts.dll
windows10-2004-x64
1MetroFramework.dll
windows7-x64
1MetroFramework.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Unconfirmed 776048.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Unconfirmed 776048.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
GrabberBuilder.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
GrabberBuilder.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
MetroFramework.Fonts.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
MetroFramework.Fonts.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
MetroFramework.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
MetroFramework.dll
Resource
win10v2004-20240802-en
General
-
Target
Unconfirmed 776048.crdownload
-
Size
264KB
-
MD5
b235095bf05eac770bfe2d2b07816e90
-
SHA1
62a901abc587a97c6a9f0e8b7b98b8056e065ab9
-
SHA256
c583dfbeec8c950c51200f3a61587ab3099e019778f3a6a8f632066c0823756a
-
SHA512
b1721221c0d17c7b2f122ed0606344a5443c968baf85c44614526a4a3ab324ec76004469a5998132724969d1898eafaa5af7f4c2a9f74e15dcd428ac0e9ec830
-
SSDEEP
6144:DFnNAZwx2LIXe3srmRfT63XzRwTqzSGomEwFSF:h2ZM2LK2srcfT6zROqzSN
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/GrabberBuilder.exe unpack001/MetroFramework.Fonts.dll unpack001/MetroFramework.dll
Files
-
Unconfirmed 776048.crdownload.rar
-
GrabberBuilder.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MetroFramework.Fonts.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\home\dvlp\ManagedXLL-branches-4_0\MetroFramework\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MetroFramework.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ