#GS5SFbF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

#GS5SFbF.exe
Size

733KB
MD5

5ec38f2ff5e6cd153e45879b4d276efe
SHA1

b4058f0399f891023c43963bfa04c0acf45ae68f
SHA256

2768400847a861225f77e29ea61b399ab730571e068f3fa8a48072c94dc893e6
SHA512

94764fff36bcdec8d864eeed4fa58e4ec5b14760211a945744565425d960a12deaab04af659c39849a37179de424599eaa0f1c32889071e87c2d43c66e040947
SSDEEP

12288:6f+mSkOpcW9Rohgfb/WT4UkuZfHBY7xsSKwN2cMNAnNiJCyeICFiEVsl+PJOzctk:6Gx/pcW9RohgfzW/Z9BwY7IAJ8Iiz4+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
#GS5SFbF.exe

Files

#GS5SFbF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ