General

  • Target
    geode-installer-v2.0.0-beta.23-win.exe
  • Size 25.7MB
  • Sample240331-bd5q2aah2x
  • SHA256 55aa5ea3f3aea2186f963209015fe71f37244df3149661746f1aaf7545fe95fd
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • geode-installer-v2.0.0-beta.23-win.exe
    .exe 25.7MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    201KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • Geode.dll
    .dll 7.5MB
  • Geode.pdb
    36.4MB
  • GeodeUninstaller.exe
    .exe 84KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    201KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • GeodeUpdater.exe
    .exe 70KB
  • VC_redist.x86.exe
    .exe 13.2MB
  • XInput9_1_0.dll
    .dll 11KB
  • geode/resources/geode.loader/APISheet-hd.plist
    .xml 6KB
  • geode/resources/geode.loader/APISheet-hd.png
    .png 80KB
  • geode/resources/geode.loader/APISheet-uhd.plist
    .xml 6KB
  • geode/resources/geode.loader/APISheet-uhd.png
    .png 141KB
  • geode/resources/geode.loader/APISheet.plist
    .xml 6KB
  • geode/resources/geode.loader/APISheet.png
    .png 29KB
  • geode/resources/geode.loader/BlankSheet-hd.plist
    .xml 21KB
  • geode/resources/geode.loader/BlankSheet-hd.png
    .png 582KB
  • geode/resources/geode.loader/BlankSheet-uhd.plist
    .xml 21KB
  • geode/resources/geode.loader/BlankSheet-uhd.png
    .png 831KB
  • geode/resources/geode.loader/BlankSheet.plist
    .xml 20KB
  • geode/resources/geode.loader/BlankSheet.png
    .png 192KB
  • geode/resources/geode.loader/GE_button_01-hd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_01-uhd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_01.png
    .png 971B
  • geode/resources/geode.loader/GE_button_02-hd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_02-uhd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_02.png
    .png 976B
  • geode/resources/geode.loader/GE_button_03-hd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_03-uhd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_03.png
    .png 1009B
  • geode/resources/geode.loader/GE_button_04-hd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_04-uhd.png
    .png 2KB
  • geode/resources/geode.loader/GE_button_04.png
    .png 1KB
  • geode/resources/geode.loader/LogoSheet-hd.plist
    .xml 3KB
  • geode/resources/geode.loader/LogoSheet-hd.png
    .png 119KB
  • geode/resources/geode.loader/LogoSheet-uhd.plist
    .xml 3KB
  • geode/resources/geode.loader/LogoSheet-uhd.png
    .png 210KB
  • geode/resources/geode.loader/LogoSheet.plist
    .xml 3KB
  • geode/resources/geode.loader/LogoSheet.png
    .png 42KB
  • geode/resources/geode.loader/about.md
    2KB
  • geode/resources/geode.loader/black-square-hd.png
    .png 947B
  • geode/resources/geode.loader/black-square-uhd.png
    .png 1KB
  • geode/resources/geode.loader/black-square.png
    .png 403B
  • geode/resources/geode.loader/byeNotif00.ogg
    35KB
  • geode/resources/geode.loader/changelog.md
    37KB
  • geode/resources/geode.loader/mdFont-hd.fnt
    8KB
  • geode/resources/geode.loader/mdFont-hd.png
    .png 29KB
  • geode/resources/geode.loader/mdFont-uhd.fnt
    8KB
  • geode/resources/geode.loader/mdFont-uhd.png
    .png 57KB
  • geode/resources/geode.loader/mdFont.fnt
    8KB
  • geode/resources/geode.loader/mdFont.png
    .png 14KB
  • geode/resources/geode.loader/mdFontB-hd.fnt
    8KB
  • geode/resources/geode.loader/mdFontB-hd.png
    .png 29KB
  • geode/resources/geode.loader/mdFontB-uhd.fnt
    8KB
  • geode/resources/geode.loader/mdFontB-uhd.png
    .png 56KB
  • geode/resources/geode.loader/mdFontB.fnt
    8KB
  • geode/resources/geode.loader/mdFontB.png
    .png 14KB
  • geode/resources/geode.loader/mdFontBI-hd.fnt
    8KB
  • geode/resources/geode.loader/mdFontBI-hd.png
    .png 36KB
  • geode/resources/geode.loader/mdFontBI-uhd.fnt
    8KB
  • geode/resources/geode.loader/mdFontBI-uhd.png
    .png 71KB
  • geode/resources/geode.loader/mdFontBI.fnt
    8KB
  • geode/resources/geode.loader/mdFontBI.png
    .png 17KB
  • geode/resources/geode.loader/mdFontI-hd.fnt
    8KB
  • geode/resources/geode.loader/mdFontI-hd.png
    .png 36KB
  • geode/resources/geode.loader/mdFontI-uhd.fnt
    8KB
  • geode/resources/geode.loader/mdFontI-uhd.png
    .png 73KB
  • geode/resources/geode.loader/mdFontI.fnt
    8KB
  • geode/resources/geode.loader/mdFontI.png
    .png 16KB
  • geode/resources/geode.loader/mdFontMono-hd.fnt
    8KB
  • geode/resources/geode.loader/mdFontMono-hd.png
    .png 25KB
  • geode/resources/geode.loader/mdFontMono-uhd.fnt
    8KB
  • geode/resources/geode.loader/mdFontMono-uhd.png
    .png 50KB
  • geode/resources/geode.loader/mdFontMono.fnt
    8KB
  • geode/resources/geode.loader/mdFontMono.png
    .png 12KB
  • geode/resources/geode.loader/mod.json
    2KB
  • geode/resources/geode.loader/newNotif00.ogg
    42KB
  • geode/resources/geode.loader/newNotif01.ogg
    34KB
  • geode/resources/geode.loader/newNotif02.ogg
    27KB
  • geode/resources/geode.loader/newNotif03.ogg
    17KB
  • geode/resources/geode.loader/scrollbar-hd.png
    .png 422B
  • geode/resources/geode.loader/scrollbar-uhd.png
    .png 731B
  • geode/resources/geode.loader/scrollbar.png
    .png 197B
  • geode/resources/geode.loader/support.md
    31B
  • geode/resources/geode.loader/tab-gradient-hd.png
    .png 8KB
  • geode/resources/geode.loader/tab-gradient-mask-hd.png
    .png 1KB
  • geode/resources/geode.loader/tab-gradient-mask-uhd.png
    .png 711B
  • geode/resources/geode.loader/tab-gradient-mask.png
    .png 653B
  • geode/resources/geode.loader/tab-gradient-uhd.png
    .png 2KB
  • geode/resources/geode.loader/tab-gradient.png
    .png 3KB
  • geode/resources/geode.loader/version
    13B

geode-installer-v2.0.0-beta.23-win.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 55aa5ea3f3aea2186f963209015fe71f37244df3149661746f1aaf7545fe95fd
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths