Static task
static1
Behavioral task
behavioral1
Sample
GFN-WindowMover.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
GFN-WindowMover.exe
Resource
win10v2004-20231222-en
General
-
Target
GFN-WindowMover.exe
-
Size
98KB
-
MD5
b2348b7b0675eb981783cc4df49a27a5
-
SHA1
a4070af9d70a7d9871076c01605b85654e2c3fdf
-
SHA256
2556eec5c30cfb1d34df471a104da8026e826df619f999df2a5d79bb5d830e18
-
SHA512
3c50cc959b210415c74cf350a6994f2a920809479d086d6e80c57bbf9c813b97a95a157d587c51354f6d423e22349daefa49a1c64f248cb27b67cfa3a6606ed0
-
SSDEEP
1536:0pOqz6kvkaesb709IjsIRaesb709IjsInaesb709IjsIRaesb709IjsIvOH4:XqGsb4Ksb48sb4Isb4kOH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GFN-WindowMover.exe
Files
-
GFN-WindowMover.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ