Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Heur.DP.gmGea83ID9p.16074.26350.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Heur.DP.gmGea83ID9p.16074.26350.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.Heur.DP.gmGea83ID9p.16074.26350.exe
-
Size
97KB
-
MD5
5984f6d0696242b764885c666d12855d
-
SHA1
9d2a8e5d8b8a1fc987a4e39c06bcf61a690f5c04
-
SHA256
f8972a83560590bd57010eb5e9da2b927f3de9415eb55ac64859b97b062d9b46
-
SHA512
61b9f0a225b73fc35a3b96ab68dd6ecd07601da5bbd295a4fa35a661918ad3e8fc9fe8d68a1876805fa001e317ebb295f75e439faae7949405a07c3bb3648836
-
SSDEEP
1536:sUCzf+I1mIWPhQU5wXn/3Ko5oTxEhRWTQQiw/xxD5Pfx1J7sYXKZD4k6T6hB:vO1mvJQ9X/3ylsWQzw/xx5x1J7sYR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Heur.DP.gmGea83ID9p.16074.26350.exe
Files
-
SecuriteInfo.com.Trojan.Heur.DP.gmGea83ID9p.16074.26350.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 408KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA