MarvelousDesigner10_Personal_x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MarvelousDesigner10_Personal_x64.exe
Size 40.6MB
Sample260808-e5axhshn6t
SHA256 fb02cf50a8c2d83bb92d75adc6213ed43eb2e464314c9923caade4e18f4d7f5a
MD5 c4f5b96bc040e87e0d40519421e28ca3
SHA1 ae9d9f03023d53ea6d19fdabc796d40974542032
SHA512 9095a8bb20317d66d08d8b004b2a3780e291e49deabde3c0d7740829179372d644a5255b62c1b954fc93e772d31eaa14d133155c545c7e38abdeab44bfccd37f
SSDEEP 786432:tcmxSucT7xbVJDYrP+dZN+a4MEXyavEhVz7FWSIROcTQbPdLvZ6enaowuqU:PxSuc5bVJD2+N+a4MEX3EHzRJKWLvZ66
TLSH
T16C9733811676266DE3835D7EE9C1EEC4F01B2873D9C00446ABEB89625BD636C9F470F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MarvelousDesigner10_Personal_x64.exe

File Explorer

MarvelousDesigner10_Personal_x64.exe

.exe 40.6MB

MarvelousDesigner10_Personal_x64.exe

SHA256 fb02cf50a8c2d83bb92d75adc6213ed43eb2e464314c9923caade4e18f4d7f5a
MD5 c4f5b96bc040e87e0d40519421e28ca3
SHA1 ae9d9f03023d53ea6d19fdabc796d40974542032
SHA512 9095a8bb20317d66d08d8b004b2a3780e291e49deabde3c0d7740829179372d644a5255b62c1b954fc93e772d31eaa14d133155c545c7e38abdeab44bfccd37f
SSDEEP 786432:tcmxSucT7xbVJDYrP+dZN+a4MEXyavEhVz7FWSIROcTQbPdLvZ6enaowuqU:PxSuc5bVJD2+N+a4MEX3EHzRJKWLvZ66
TLSH
T16C9733811676266DE3835D7EE9C1EEC4F01B2873D9C00446ABEB89625BD636C9F470F8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

115474520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

17.8MB

Virtual Size

56.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

11.7MB

Virtual Size

32.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

54KB

Virtual Size

825KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1.2MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2.4MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

17B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

89KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.exports

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.imports

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

30KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

256KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

7.0MB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=11, id=199, version=41118,

count=10, id=260, version=26706,

count=8, id=259, version=26706,

count=37, id=261, version=26706,

count=6, id=257, version=26706,

count=1, id=261, version=27034,

count=16, id=257, version=27034,

count=1, id=206, productName=VS2012 build 50727, version=50727,

count=15, id=207, productName=VS2012 build 50727, version=50727,

count=211, id=260, productName=VS2015 [14.0] build 23026, version=23026,

count=106, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=8, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1, id=259, productName=VS2015 UPD3 build 24210, version=24210,

count=54, id=260, productName=VS2015 UPD1 build 23506, version=23506,

count=19, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=8, id=257, productName=VS2017 v15.9.11 build 27030, version=27030,

count=2, id=257, productName=VS2017 v15.5.4 build 25834, version=25834,

count=2, id=257, version=27038,

count=180, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=4, id=257, version=27024,

count=35, id=261, version=27024,

count=4, id=257, version=27031,

count=94, id=260, version=27031,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=2, id=257, productName=VS2017 v15.7.5 build 26433, version=26433,

count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=25, id=257, version=26213,

count=5291, id=1, productName=Unmarked objects,

count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=261, version=27043,

count=2, id=265, version=27030,

count=1317, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,

count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,

count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,

count=1, id=151,

count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,