c:\users\chara\documents\visual studio 2010\Projects\LoGeeK\LoGeeK\obj\x86\Debug\LoGeeK.pdb
Static task
static1
1 signatures
General
-
Target
LoGeek.zip
-
Size
396KB
-
MD5
5744500ba651f52d7572c617c8e87f30
-
SHA1
bf0f60c43bce365f2ce598957f455e665ff33592
-
SHA256
feaa592f5009b73b6b88704f07fc420d7635d95db6375c77370f3540607e0f83
-
SHA512
6b5b0f78fbd302a79f004caa45e04c832c7f9059e9765dc3d53851a25528107913ec1f7be88bdbce0a0ade1bad30966156c338c6e12aeac0280a87fd30decf79
-
SSDEEP
6144:d7+fNqdprv//okAJSu/1efpmBZ9XFz5Cnbjfa76fOvLLDKQgdzSoea+DeJVSg:cFs/gk4WpYXXV5Cna76fOvfDydMa+Sug
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/LoGeeK.exe unpack001/dnlib.dll
Files
-
LoGeek.zip.zip
Password: Infected
-
LoGeeK.exe.exe windows:4 windows x86 arch:x86
Password: Infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
dnlib.dll.dll windows:4 windows x86 arch:x86
Password: Infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\dnlib\dnlib\src\obj\Release\net35\dnlib.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ