md5deep[.]exe | Triage

Sharing

General

Target

md5deep.exe
Size

32KB
MD5

a27dbb5051f41ee7e0b0ecfd5299b10d
SHA1

9cf0cec555af837e330b9ee315f7f13791e405b8
SHA256

5bfbe0cb33c78edb58c96c44373055665133658025216a81af1f880c26815ead
SHA512

18ff7225215774e821edc726d7429ddf91d80a19097b57e815438f5ce9e1d9dde7acbe38f661c5d2149221ea162c9ca203886016bc34a95ffbc4c39f9361be80
SSDEEP

384:M0yiAaV9trlKhfLTcwu0Lf+ca7mHruNGyYRyEja4pIulGxvdG0zlFem/BAoaxdN3:nAmlUpuQ2FmHruNGyYREuExX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
md5deep.exe

Files

md5deep.exe
.exe windows:4 windows x86

aa62d4a48db6f284db37295fa3a5020b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetFileAttributesA
SetUnhandledExceptionFilter

msvcrt

_getcwd
_stat
_strdup
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_snprintf
_strnicmp
abort
atexit
clearerr
exit
fclose
feof
ferror
fgets
floor
fopen
fprintf
fread
free
fseek
ftell
fwrite
getenv
malloc
memcpy
memset
printf
putchar
rewind
signal
strcat
strcpy
strerror
strlen
strncpy
time
toupper

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE