protoc-gen-grpc-gateway-v2[.]32[.]0-windows-x86_64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
protoc-gen-grpc-gateway-v2.32.0-windows-x86_64.exe
Size 11.0MB
Sample261102-s9xtqsdt7k
SHA256 ea0624c7e168abae94dfc492eba525376959a5347137eb674740c326d41f3921
MD5 8b14c08a9b9f8f59cb8fa3cf34c69f02
SHA1 a1f0f0f3a62bdd09650fd951e9e8b8d9fa501269
SHA512 403bc172155414780c9e0ecc48597ccc8a895a8b862c51340531887406e31b1e27a02ec260a04bbf4a553702fe457d48f23a4fb15bb883f1cbb670031423e2d1
SSDEEP 98304:2IXcBpMEyWH7Ji+0oAZT/YlkrBz5I7bjE:nMuJWbLAZT/GyKc
TLSH
T1E6C63907ECA504E8C0EDC135CA6295667B707C898B7523DB2B60B6343F76BD09EBA354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
protoc-gen-grpc-gateway-v2.32.0-windows-x86_64.exe

File Explorer

protoc-gen-grpc-gateway-v2.32.0-windows-x86_64.exe

.exe 11.0MB

protoc-gen-grpc-gateway-v2.32.0-windows-x86_64.exe

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 ea0624c7e168abae94dfc492eba525376959a5347137eb674740c326d41f3921
MD5 8b14c08a9b9f8f59cb8fa3cf34c69f02
SHA1 a1f0f0f3a62bdd09650fd951e9e8b8d9fa501269
SHA512 403bc172155414780c9e0ecc48597ccc8a895a8b862c51340531887406e31b1e27a02ec260a04bbf4a553702fe457d48f23a4fb15bb883f1cbb670031423e2d1
SSDEEP 98304:2IXcBpMEyWH7Ji+0oAZT/YlkrBz5I7bjE:nMuJWbLAZT/GyKc
TLSH
T1E6C63907ECA504E8C0EDC135CA6295667B707C898B7523DB2B60B6343F76BD09EBA354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

570880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4.8MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

509KB

Virtual Size

32.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

protoc-gen-grpc-gateway-v2.32.0-windows-x86_64.exe

kernel32

generic