c:\projects\gzfilter\trunk\src\gzflt\objfre_wxp_x86\i386\gzflt.pdb
Static task
static1
General
-
Target
bd269501bf7462af43b8e5ed7e8202d7
-
Size
135KB
-
MD5
bd269501bf7462af43b8e5ed7e8202d7
-
SHA1
2d38141e9a08f26f719fd38e6f9f6d6ed3d0bf11
-
SHA256
26da9e1eaa9f1819be6750106444ffd3b83cb1decd9818df91bee1425af0db02
-
SHA512
f54955b7c457a1ecc37a119d1aadcf54b8048dfc2dcc9938d50623c18f03fd8799cc437e6015d904b215d43cf20b771884e8da6b4296ad6e976ce26888916ecd
-
SSDEEP
3072:z2jb8aeeEYMMson5hZya6SOXDspvBpHEbq1Qqrotn:z2caRbMzokD+fuiotn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd269501bf7462af43b8e5ed7e8202d7
Files
-
bd269501bf7462af43b8e5ed7e8202d7.sys windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ