gdi_test[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gdi_test.exe
Size

12KB
MD5

48ae008f4e46e24e4032bb21d80dd810
SHA1

3dafdcb3a386745cfec3246491760aeab7dc8adc
SHA256

4ed142646695b5084f4aad788031ada07d8196ced9bd927877abf0f0c9c38aab
SHA512

5be14861b1053632eb4220d67817ca49e13ce9f5d054dd7e34f9ad2a5f885b0f3ba6eed403a5318df48418b006fd0cb4acbf35d3b1265bb2f49fea17aa08b94e
SSDEEP

192:AoqIqNpSTFVuHSm7bPZ6ZdhB5xRERfa5o7l/rfjNS7:AnEFMStZxSRfa+7BfhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gdi_test.exe

Files

gdi_test.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ