D:\PMS\pms4\Project(20131216)\GbpInstall_2008\bin\GbpInstall.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27c1b7279c83bc0f90eceb6e6b099d595922fddd2c93a284a815bf155b6e086d.exe
Resource
win7-20240221-en
General
-
Target
27c1b7279c83bc0f90eceb6e6b099d595922fddd2c93a284a815bf155b6e086d
-
Size
198KB
-
MD5
0321a1af397a1897d08f7ead1268c2ca
-
SHA1
23f8ba0fefbea3d89463a47bc210ffa120fe47d0
-
SHA256
27c1b7279c83bc0f90eceb6e6b099d595922fddd2c93a284a815bf155b6e086d
-
SHA512
ba56d89554b9076a67a62cf2b4738116227e93fe40839b206996d82164d13d5fbfdec826e3e0c605021b61c8849b3b2bb5b5d4868cc8ef835f2b36cf15b2612f
-
SSDEEP
1536:JC6NwvWRFC2nnJQKmRTcUEj2n+UaArfaHWstECJUZLrSVkk8rBxOHMEpHXD:Pf4TdEj5Uaua2oE9fKkkuzspHXD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27c1b7279c83bc0f90eceb6e6b099d595922fddd2c93a284a815bf155b6e086d
Files
-
27c1b7279c83bc0f90eceb6e6b099d595922fddd2c93a284a815bf155b6e086d.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 145KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE