Behavioral task
behavioral1
Sample
10442570x0000000000400000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
10442570x0000000000400000.exe
Resource
win10v2004-20230703-en
General
-
Target
10442570x0000000000400000.dmp
-
Size
15.1MB
-
MD5
43debc5f883b69e28c3e96dc5bbda6ce
-
SHA1
dee081ee59ec288cab5578d91eb9fed783180af7
-
SHA256
4fdf010426acbd25d472ea516ea28c0a666a8f0dfd399a137c718aeaa16c1aa9
-
SHA512
15a2467cc7f61d4be50c799dd3960cc93e1abffcb5a5445b453961501830a534071fa554ff9bdba1d918635d82180dc3a8307c5c712ff25692bd1d2f38f70d6e
-
SSDEEP
12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0ryhLOSfmiUG:S3JNB0oSO0
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
Signatures
-
Gcleaner family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10442570x0000000000400000.dmp
Files
-
10442570x0000000000400000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ