Malcord[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malcord.exe
Size

10.3MB
MD5

35c5e8d610d8da34862d31b613d4dd54
SHA1

afee45e2a1c89c7ff3078816035bff01a8f5fa1e
SHA256

ca598b2f12b32c4279a078d9ebbcc4fd6234f83e2b4e056a1eb9e4de724077f6
SHA512

aa5976b108b3aedfb8322fdfa19fb664b636f6fd60ddd7fe76351b09469d0bf126441ed95909e35282de4da33087ab86123c1987d5fa30d9b187ec0d2cbd04be
SSDEEP

49152:BFtQVVxbswSgORIXmvxhuj4eKa7ieJG5JewJp93uj05EnZS1qPb4Ao3la9+MLENQ:gLsVEb45VfTEZLD4dBLhChaUpyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malcord.exe

Files

Malcord.exe
.exe windows:6 windows x64 arch:x64

Password: 1234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 43B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 3.3MB - Virtual size: 3.3MB

.data Size: 314KB - Virtual size: 630KB

.pdata Size: 75KB - Virtual size: 74KB

.xdata Size: 512B - Virtual size: 180B

/4 Size: 512B - Virtual size: 332B

/19 Size: 577KB - Virtual size: 576KB

/32 Size: 120KB - Virtual size: 119KB

/46 Size: 512B - Virtual size: 43B

/65 Size: 1.1MB - Virtual size: 1.1MB

/78 Size: 727KB - Virtual size: 727KB

/90 Size: 215KB - Virtual size: 214KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 69KB - Virtual size: 69KB

.symtab Size: 540KB - Virtual size: 539KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 3.3MB - Virtual size: 3.3MB

.data
Size: 314KB - Virtual size: 630KB

.pdata
Size: 75KB - Virtual size: 74KB

.xdata
Size: 512B - Virtual size: 180B

/4
Size: 512B - Virtual size: 332B

/19
Size: 577KB - Virtual size: 576KB

/32
Size: 120KB - Virtual size: 119KB

/46
Size: 512B - Virtual size: 43B

/65
Size: 1.1MB - Virtual size: 1.1MB

/78
Size: 727KB - Virtual size: 727KB

/90
Size: 215KB - Virtual size: 214KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 69KB - Virtual size: 69KB

.symtab
Size: 540KB - Virtual size: 539KB