GPTC[.]PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GPTC.PDF.exe
Size

638KB
MD5

988d8b04e0842ff6b6858074b886001f
SHA1

32c85b9ceedfee529180929e25e8d1712a062686
SHA256

8fcc45ad91c946c56a807d763576062e0a427539b9cb7fe2deb239b1da98e775
SHA512

b32b047eacc8b286eb4328eafe5044975bacafc9e7d55581cd4b791184c588113b498c56182c96c44ce8357104c393cd3f51ee1ee8ed8ba25d664b69b63f9599
SSDEEP

12288:mEBO5ZZC/W2n9TagFywtYxG0PvFID4FB7Jv4LqQUM1uhJl1cyWn9EVTV0y:mEqTC/fkgFVt4XXFFJwqeay9

Score

1^/10

Malware Config

Signatures

Files

GPTC.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ