cd1b2338225ba711b3934b2fbd28c7a56cffb83f225b0ed51e45d3d270d8578e

Sharing

Copy URL Twitter E-mail

General

Target

cd1b2338225ba711b3934b2fbd28c7a56cffb83f225b0ed51e45d3d270d8578e
Size

5.4MB
MD5

3ab2810188e3f2b985fc0344d6652cd3
SHA1

c6aa49e2ac05189bfabf31d710dd85d82cd9f85a
SHA256

cd1b2338225ba711b3934b2fbd28c7a56cffb83f225b0ed51e45d3d270d8578e
SHA512

65395354eed553379c8817ac07eb65751d2fb61a068dcbf2a2032449c614cbc26da7fc7ade31d8771b2b5fe13a48968f770e0a748df8e2bf1aa7c993bdf56bfe
SSDEEP

98304:CG9S5mBaT1XWBcjDiIh9pMipU6DXoAUNKbFf5QEn/hGdP5SW86XB4+LvefwFXOPa:CGIoBaxvh8F6D4ofGu/WS8XBTzrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd1b2338225ba711b3934b2fbd28c7a56cffb83f225b0ed51e45d3d270d8578e

Files

cd1b2338225ba711b3934b2fbd28c7a56cffb83f225b0ed51e45d3d270d8578e
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\dev\jenkins\workspace\plc-win-installers-dev\_builds\plc\win\32\Release\installer\geocomply-plc-service-setup.pdb

Sections

Size: 1.6MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 299KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 20KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 81KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 99KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

Size: 1.6MB - Virtual size: 3.5MB

Size: 299KB - Virtual size: 832KB

Size: 20KB - Virtual size: 96KB

Size: 81KB - Virtual size: 452KB

Size: 99KB - Virtual size: 167KB

.debug Size: 1KB - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 105KB - Virtual size: 105KB

.winlice Size: - Virtual size: 5.3MB

.boot Size: 3.3MB - Virtual size: 3.3MB

.reloc Size: 16B - Virtual size: 4KB

.debug
Size: 1KB - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 105KB - Virtual size: 105KB

.winlice
Size: - Virtual size: 5.3MB

.boot
Size: 3.3MB - Virtual size: 3.3MB

.reloc
Size: 16B - Virtual size: 4KB