D:\PMS\pms4\Project(20140127)\GbpInstall_2010\bin\GbpInstall_2010.pdb
Behavioral task
behavioral1
Sample
4f7a03ef8e4cc1b0f54716ffce5d011650de9001de3c3a143f7f0822aecb17d7.exe
Resource
win7-20240221-en
General
-
Target
4f7a03ef8e4cc1b0f54716ffce5d011650de9001de3c3a143f7f0822aecb17d7
-
Size
138KB
-
MD5
2f27530e87d506bec3d3992cd9ce96a0
-
SHA1
f30726bfaf37035108cfa019975a820e2319ef58
-
SHA256
4f7a03ef8e4cc1b0f54716ffce5d011650de9001de3c3a143f7f0822aecb17d7
-
SHA512
1c10e96346d795437881d97639a4ead4691161f931c25e99fe70ff62258932b16ef51aa427861b9239e6897e6977b9bd6b1ce51d721a7ff4044dcae60a83f5d0
-
SSDEEP
1536:cjz9pu7vsc2r+Bd6DKeIWNhTWyA/IqinUiVrVjtxA80jUQcw9f1YoMrp:cjju7vsrDhyIxUiBKpd9f1YoMrp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f7a03ef8e4cc1b0f54716ffce5d011650de9001de3c3a143f7f0822aecb17d7
Files
-
4f7a03ef8e4cc1b0f54716ffce5d011650de9001de3c3a143f7f0822aecb17d7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 132KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE