GShade[.]Latest[.]Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GShade.Latest.Installer.exe
Size

134.7MB
MD5

995d4a302a207c107889dc0e60acb0c9
SHA1

f9323a1202f71fecd66a4505ce894b46a11f53ec
SHA256

94d3e572808d7c10e91b11e22e315e9448def968f97c39a06bd24cf04a1a37df
SHA512

312a6fecb753487a0377d8560d7233ad3288a0b20689ecdcda0749e53ef372ecc758b4e64924ed5f9011144f18e7a0649282fba281fb44be36b8ba3929289afe
SSDEEP

3145728:XawxkDfNby7tZIW1oC4af6IrAtOUFsLi8UX1xn1oYbS5fB8Gsb:XawERW1oC4ANcsLi8UnXb

Score

N/A

Malware Config

Signatures

Files

GShade.Latest.Installer.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 134.7MB - Virtual size: 134.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ