PowerDesigner161_Evaluation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerDesigner161_Evaluation.exe
Size

336.7MB
MD5

c5308e0ac00da9d0cb2be98ddba72241
SHA1

a15eef98438052ce1c98201f07ed8351c9b39145
SHA256

4d066c00086ad068ac266765da03c50f8285828ccaf600d804aaa34b974b07d4
SHA512

193157c5fbb52a04ce07c37904fb714cc5afcc6011890eba8bc29f4a9f5643b8f0046dad735a2fbec1c54c8373a8a4c02b537dd836188a9f00d3e15be3fa60f1
SSDEEP

6291456:6de5ag7Zc1yomfClEJqD+m/Rkc32ClbxpV+8jQC9b0tdp:i4ayqaJkRZpdzlA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PowerDesigner161_Evaluation.exe

Files

PowerDesigner161_Evaluation.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 558KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ