godrain_0[.]1[.]0_windows_amd64[.]zip

resource
unpack001/godrain.exe

godrain_0.1.0_windows_amd64.zip

SHA256 4237478e1b606bd8a6a7500f1fc9c99a1e73ba5e368a1a46c208680acf7fd6df
MD5 143f58d82f402b482d7cca1a9934436c
SHA1 ab3219314906c9fdbf6b26ad519fba43a2b1ccaf
SHA512 3f5c70375e218b564c19b492c2936b7c9438bf7308f9b299b15b0d3f48aee7e3b5592a123250d806d280440eb2ed9b39fc179b2967070674d5dd94d17db2a7b9
SSDEEP 98304:xtgBOuU19CEnQcYJvF+EPf5La51AUG1HAv:xtgsYNfuAEv
TLSH
T161F533C8FFC9E52C92659483A592FA48F85674F7C7A3661E7C7365286A94C330C9FC08
MD5 SHA1 SHA512 SSDEEP TLSH

CHANGELOG.md

SHA256 9e43efa6dad75410b9046a576841382d6d9b1d7b5afdd5d2e224421f6fc69388
MD5 ff2cde08980cc8a7cbd8a8b0d5e64c9f
SHA1 21737895dd755f677b6ec9e4b5eca50a19e042ff
SHA512 3fdc5eadcd93ba487ed7ff793a3664da32fb067337c8244569052875cfc6bf0df794770579133a0a295db3a6d04f0e02eac469de149640d47fcbc88a74d94db8
TLSH
T16F1188E7A32444DFDE8376E9B9961059FABE42D85540245E1D4811187506414A95B24F
MD5 SHA1 SHA512 TLSH

LICENSE

SHA256 cd170d302d76e8718bc232725d720491731d49bcb5006b6b894648c026691eef
MD5 77f6f5d447e8b109ddec58dbe74b905d
SHA1 3b2d1ebc8b1398c28dd022004e6cdc8d72d91b08
SHA512 5a56d6de79942a8833c8aa4147e09f1f6591f6c560facd5bf87ba12a7f2c2e282dd027207297a3ac40ba9de6a4be39727415951b4b830adb2f91311c60ba9cdb
TLSH
T18911751E72514772289B13A05578ACD5F23BB25F7A5F2A84246DF345233A06CC5FF840
MD5 SHA1 SHA512 TLSH

README.md

SHA256 92f5fa1a47569f361dc821f392c864a6574b4aa892284efff255993dfea423c2
MD5 af9b0eae64c50ba5065d0d7caef3d899
SHA1 c65441936b99803ccacfc87d9deb8a70aeb954c4
SHA512 d7e95968449db1362b892ff5afa812394597deba160ac3e35026be79bbb6cfaebfb9cda07d24f6ca7d44205f137b76537b4d0aae237a0da07fe0e157930c1cff
SSDEEP 192:vGlM2a9HlKzt3Y2gP4EG7tg5gje1YMbxKUcy:vGl9m2ggEug5gje1YMb3
TLSH
T152F10D668CBA02570727D37FEDB63A55EB32E07652812C4CAC99905939421DE861F3CF
MD5 SHA1 SHA512 SSDEEP TLSH

godrain.exe

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 d2e7ee8b3df16104d769ec3b3f8c4881fa13af91efcb945f0eb17f52ba4d0bea
MD5 ec639cc3f676822d0ad489a2b280722c
SHA1 afafee5dd9687900cafe89ac416be7ab65dae77f
SHA512 be065ea08779203ea1ef2c2b6fa17dc4a69e3cfb700fe353fe23b151d3536674713aa2c22ec62b6654804dd88d7d8d41cb93a4ffacf4ae472d545f6b592053d1
SSDEEP 49152:WBuBt8D0GS0qK9ieeAmUWQiyfEeXw5Ded74RtfCx9U6LhZM4T7FMdIqmsUFdiPKV:WgDKwWeAppfRgi9x5F+IXyE
TLSH
T12F763843ECA559E8C0EED1748A729553BB71BC486B3023D31B60F2246F76BD0ADB9358
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

565696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

375KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ