coordsfinder-windows-cuda[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
coordsfinder-windows-cuda.exe
Size 704KB
Sample260828-a848babe23
SHA256 6f185fa78626883c91a80712e627ebc767fe2a36c77e84b25029e846bb408fd1
MD5 6a65cadf54f6156417fc22556271781b
SHA1 7836acbf2209b4796bcc1f4f00ee59c0674a957d
SHA512 8e2a6852f5f92e84658647c3bbb28a5bfb93c003d8806d87ff348f213b05a1854cb3a341dd1e8c4cdd3de3cdcf7c2bee01faa30f451437ca67ecae686989be8b
SSDEEP 6144:XJYRxQA+h71281FJa+4/iNupf6idMBZnt30Ft/Vdx0B5ZP1Cs79f:XJGT++8vTNu7dM7navx1s79
TLSH
T142E47DBBA5E84CE5DD5BE0388A924602E2F2F4530321DFEB46D04A661E636F74F39714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
coordsfinder-windows-cuda.exe

File Explorer

coordsfinder-windows-cuda.exe

.exe 704KB

coordsfinder-windows-cuda.exe

IMPHASH 154fbf757f28dc56172b12e1b2befda1
SHA256 6f185fa78626883c91a80712e627ebc767fe2a36c77e84b25029e846bb408fd1
MD5 6a65cadf54f6156417fc22556271781b
SHA1 7836acbf2209b4796bcc1f4f00ee59c0674a957d
SHA512 8e2a6852f5f92e84658647c3bbb28a5bfb93c003d8806d87ff348f213b05a1854cb3a341dd1e8c4cdd3de3cdcf7c2bee01faa30f451437ca67ecae686989be8b
SSDEEP 6144:XJYRxQA+h71281FJa+4/iNupf6idMBZnt30Ft/Vdx0B5ZP1Cs79f:XJGT++8vTNu7dM7navx1s79
TLSH
T142E47DBBA5E84CE5DD5BE0388A924602E2F2F4530321DFEB46D04A661E636F74F39714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

212060

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryExA GetEnvironmentVariableA FindClose CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection WakeAllConditionVariable GetCurrentProcess GetCurrentProcessId SwitchToThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree GetNativeSystemInfo VirtualProtect FreeLibraryAndExitThread CreateFileW SetLastError GetModuleFileNameW GetModuleHandleW LoadLibraryExW SetEndOfFile WaitForSingleObjectEx GetExitCodeThread SleepConditionVariableSRW GetTickCount64 WideCharToMultiByte InitializeCriticalSectionEx GetSystemTimeAsFileTime EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler CreateThread ExitThread GetModuleHandleExW SetStdHandle GetFileType ReadFile ExitProcess GetStdHandle WriteFile GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW RtlUnwind

Name

.text

Size

358KB

Virtual Size

358KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

163KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nvFatBi

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

coordsfinder-windows-cuda.exe

kernel32

generic