Behavioral task
behavioral1
Sample
GdiFix.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
GdiFix.exe
Resource
win10v2004-20220812-en
General
-
Target
aa6c749da6934e5e5e85465eed0622afb7186318d9fb26e340b83ac68f9c74fe
-
Size
872KB
-
MD5
03df3763e4ba53e0d71157eb8c5467a1
-
SHA1
63deeaaaf8bb8a076d178dfb266b8422358fb9fe
-
SHA256
aa6c749da6934e5e5e85465eed0622afb7186318d9fb26e340b83ac68f9c74fe
-
SHA512
e3e3407f7a252662958b673a46a77a860c45bfc99cd2f24213d937ba054208d1c744deda964c63fa9cb6e2542a76acf7613c92c81de66210bc7a3aa77cc93df2
-
SSDEEP
24576:dCDFtEEM0bUa//vwecBDaPJSEmgrwqzOQDpQZ0PW+:MDF35MBDahwgUkpK0PW+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/GdiFix.exe upx
Files
-
aa6c749da6934e5e5e85465eed0622afb7186318d9fb26e340b83ac68f9c74fe.zip
-
GdiFix.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 848KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
˵.htm.html .js