XDIMaker[.]exe

General

Target

XDIMaker.exe
Size

40KB
MD5

7e3032edb5a1f2f5c852551cf8199937
SHA1

bdc6c4b6fbecc68502c991bf6903699f5d61ba83
SHA256

fc79bcd8eeb55426c914838c52fd5eaf4bd4333fe920f32ef4179bcb57b13077
SHA512

af25f75ddb3206b77b997d4e320513cd5516ea1729779e5470d1da563eb5302a623fd13b828c1e0a32f64565ff7e0c5a609a8e168cec718b250fbb7a1b874509
SSDEEP

768:niEnLbdvi0hd+2VDR0pqmTf1vEWwaSd8gdvcDW:Bvdvzd+2P0pXTdsWwTdVvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XDIMaker.exe

Files

XDIMaker.exe
.exe windows:4 windows x86 arch:x86

8fd7d13fc5c92f709d48735043314ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\mpiva\My Documents\Visual Studio Projects\XDIMaker\Release\XDIMaker.pdb

Imports

kernel32

VirtualAlloc
VirtualFree
SetFilePointer
WriteFile
ReadFile
CloseHandle
GetFileSize
CreateFileA
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qnk
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8fd7d13fc5c92f709d48735043314ed3

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.qnk Size: - Virtual size: 1B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.qnk
Size: - Virtual size: 1B