Static task
static1
Behavioral task
behavioral1
Sample
GShade.Latest.Installer.4.2.0.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
GShade.Latest.Installer.4.2.0.exe
Resource
win10v2004-20230221-en
General
-
Target
GShade.Latest.Installer.4.2.0.exe
-
Size
77.4MB
-
MD5
c9ea433522ee7b9fa521695d28d3b4fd
-
SHA1
24b7e4c70cfb2701f90a2d0571e0653dcbb41c25
-
SHA256
1d4c67cf85449b00f9e3cb68f33815c44bc1608a245906abb0cdd80323e058ce
-
SHA512
337247d2b953de4868dbf27d36f4d445a7539399d9ee0f8cf96cd0d0321844ed24241b3f4cd5ed4ea28f44bec32b927e32b52ac941a1ee816ee856e2e72fb223
-
SSDEEP
1572864:MawxkUmf/ekbyeADRvjf6ZPreVttprMUFsmwez8gq08eHxzgUvPdh4r:Mawxkjf1byFpjf6xrAtQUFsLi8RyxUw2
Malware Config
Signatures
Files
-
GShade.Latest.Installer.4.2.0.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 77.4MB - Virtual size: 77.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ