gmac[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gmac.exe
Size

119KB
MD5

b1f9f1522592c03b646635f67b4f0419
SHA1

34db6846a828aa59790ccd427b83750c5fff11d9
SHA256

f72b37c54d5cdb150576cfae57ce113d618dd6e32131253c42b9673f77091cf2
SHA512

f5a7978d428f2fb6e5093115fcf9723c6b2256988676c9fb5c8068c09a7db5b4d38f996fcdc807d32b3b91844b2795f06d5af855a7fde1b07fc2e7d22162b9f5
SSDEEP

1536:KOS6hFjkb9qwBPNJkYzJFgN8EHLajYAY6LMzjL9jK00z1wKWda9hUQ2bZ7d2j:pSMWljkUCN8EHLajTYR9c6DdimR2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gmac.exe

Files

gmac.exe
.exe windows:4 windows x86

91b6f6f28a07465ec1009d43f248b777

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
atoi
fclose
fgetc
fopen
fputc
fread
free
fwrite
malloc
memmove
pow
printf
putchar
puts
realloc
signal
sprintf

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 656B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE