Behavioral task
behavioral1
Sample
Gadenis.exe
Resource
win10-20240404-en
General
-
Target
Gadenis.exe
-
Size
781KB
-
MD5
71b95442443e68968a6b57695b0a7c3a
-
SHA1
9c6704a948d1738c152d6b2eb661802aa5238490
-
SHA256
96ba623b49bc0e546b7c0d66a0cfeb457cdb882700ceacc424468cf4998ec5bc
-
SHA512
1a7769780611876c7fa32ba8f204c22df8c0a73a792544c59203775212572358c5cce52e8f9973a1fb4c97d0bc9861b79c40c243c56242d8a33918fe95be0fd6
-
SSDEEP
12288:HoRcAm7QW7JlbJjyToYhRnOdwn52ruFSWgoxxvPZj3WN3dn9KYoh6STqaVRsyJaF:HoCn7NdORKsEruwWDPZjmn9K9h6SmY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Gadenis.exe
Files
-
Gadenis.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 778KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE