rawaccel[.]exe | Triage

Sharing

General

Target

rawaccel.exe
Size

410KB
MD5

4af35d45d33011a4b161474e2fdc574d
SHA1

19381f3377d016e8661df26f4300fb46abfea795
SHA256

8f134f7dd9fd3dd6609b3194b4dc743f081ac8dc711e63c378e50e42d7dfcb3a
SHA512

77d38bc6302dc4868af3aa12c49b646a79bb1c74d7799018b8a154bd760f61d54c4a442fa2ee2972ec4b0bf504d36e181bba3205a00d003faf3a1c7cd57fc802
SSDEEP

3072:JbPVoEY5ll2vSHCZfgDnqCiLxBrQeu2C9+55xDTGpZib9mXfb9mx4:1NdUll26HyOiLxBrQf2qXg9mXj9mx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rawaccel.exe

Files

rawaccel.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\alex\projects\accel\rawaccel\grapher\obj\x64\Release\rawaccel.pdb

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ