gif(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gif(1).exe
Size

27.5MB
MD5

6bc21ab33f0e7977ed5d6cbe81a9cfaf
SHA1

e416993a0b988a0ab415e4f387ead0e41dcc9d57
SHA256

70c62bac1d7353f5f76190ed032cca84b209977ff7a5401c2f268493d832741c
SHA512

f5d4e9c75e9f941299faec4b7c0059c4b027824106f422a3cadf244ec0fa672c1c3f2c2f713f80ad3560df4ae75fa326094420038edb53d58254cdd8ff37a016
SSDEEP

393216:zPFyGePGcN1kELDBec8g9JqKcvoPqHrxrCSEbtkiYwkqUvwMIVXmpHUHjtvPpVml:zNDK1hDBg2kKUoyHruk/qMD6yHUjBR2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gif(1).exe

Files

gif(1).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27.4MB - Virtual size: 27.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ