Static task
static1
Behavioral task
behavioral1
Sample
GXExec.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
GXExec.exe
Resource
win10v2004-20230220-en
General
-
Target
GXExec.exe
-
Size
20KB
-
MD5
c1cfb3e471706fcf9b70a1137957d24b
-
SHA1
76d7af56ec2d08defe0085c2b7cf097ab5f268fd
-
SHA256
87306703264f6c331abb2365f581e44a8396ef595a3488ab8bf4d1f08893b792
-
SHA512
a83e791670265621f9a48b38f9bc9c79c88986bdf9b6603626e0e51c52ccd2cce2a6158854e70c61073d61f65d5a060b44a752c7274e6355490d3cffbe00edd6
-
SSDEEP
96:BOqu3E267w9mvbqStDa4Va04SK+kZsX1m2Q25RWk1S6pFjzNt:Br26M8v+8Da4Va04Sm+lCE1zpz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GXExec.exe
Files
-
GXExec.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ