gabe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gabe.exe
Size

23KB
MD5

87b6902d001cf24cac06d7fdd0a86db5
SHA1

3d38d55c9e63190fd0ffa4ef011afb6fd0b06e39
SHA256

e05834a2ab99144b363b0d7fb05eb6ed15ee3706e78c263e951031b37eeb9e26
SHA512

d0a0c04d1424767cc1063180b5ef7c26ed0774391abe06e28d8aaa66c2c8e89716814f22a9b5509afe6f39648a53881754bbd54d5bcc93f99f33bc15260e3b88
SSDEEP

384:/Lpt/p1g/0OFrK5AWdaLiFhPLTuiEnd1sICJbt5j8KoQrJK2Ts:zpt/p1g8gX5OIlLR24

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gabe.exe

Files

gabe.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ