GDpp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44.exe
Resource
win10v2004-20240611-en
General
-
Target
f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44.exe
-
Size
693KB
-
MD5
cfd898d7193a739a5625ac7ddf1abf45
-
SHA1
98e53f7eaa012f50995d7042d3684a721b3faf46
-
SHA256
f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44
-
SHA512
bcddcd3d45afcd060f8e654c6c9f7c6d97466e2aee7729f3e691f007052de560fbd1ddf78bc18dc5831395a9b0aa736990e7ec52d60ec0bd23a660b69136f11c
-
SSDEEP
12288:baGwtNxc/Q1C8qNy3qrwTFt+WcRDJgLFdjdZRu30NBl1Vnrfumy2bDph0:ep+GVqYCaYWcTgDjz8Al1tCnoN6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44.exe
Files
-
f1a7405298874fe0382def7c612ff12d72e7315f5aaa514122200d461717ea44.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ