C:\Users\ethos\src\github.com\AVPI\GAVPI\GAVPI\obj\Release\GAVPI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
GAVPI.exe
Resource
win10-20240404-en
General
-
Target
GAVPI.exe
-
Size
2.9MB
-
MD5
48fcf208f0ee85818e04872e2f12efb3
-
SHA1
a17b112e9cfac0b614c1ef8f87209ca91390f065
-
SHA256
0bdcbd52f58acd4a5230ab1b3e093fce6666d1913d3b5af5e11b956a936e8833
-
SHA512
e30c23091572e545ab2fc1d7dbd272393454766dc2ec8327ebbec83635ac44e256d8f1e2bf3f48d4ac41df438eedf396d1041ea6bd4adc08b1e7224dcd5a65a5
-
SSDEEP
12288:N90ymBqEHFYHFYHFYHFYHFYHFYHFYHF+RAuzHFYHFYHFYHF3HFOHFAHNy:LSRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GAVPI.exe
Files
-
GAVPI.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ