e:\GD2BASE\EDITOR_11.0th\SOURCE\Reuse\GID\ed_st_RC\Release\GD2GID_ed_st_RC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1ee2e6b36b7d79a425fda25c96a6aa10N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1ee2e6b36b7d79a425fda25c96a6aa10N.dll
Resource
win10v2004-20240802-en
General
-
Target
1ee2e6b36b7d79a425fda25c96a6aa10N.exe
-
Size
119KB
-
MD5
1ee2e6b36b7d79a425fda25c96a6aa10
-
SHA1
62f17d300c9fe12ecdde0ae409a90904ff9576fc
-
SHA256
83d0abb0ddbac1b56de4753907fc40a3142276e3177b46c1440d24b67f98c4ed
-
SHA512
bc584198bb956534c3f17417eb38f04565fe3883ba8d863481c766c5da14edbfe9369be356cfe7b075259299b65d75400e1931a64009b80f6d8ab4e8e550cfb5
-
SSDEEP
3072:tOIdbNqfQnUPoJx14twVCqM0k/wz2E929gD/Et7GNGzyA:FRnUPoLuyVCqM9/wbjXIzyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee2e6b36b7d79a425fda25c96a6aa10N.exe
Files
-
1ee2e6b36b7d79a425fda25c96a6aa10N.exe.dll windows:4 windows x86 arch:x86
1e284299a29be2f0f78d125ac704cda3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mfc71
ord762
ord1175
ord371
ord1098
ord1084
msvcr71
_except_handler3
free
malloc
memset
__security_error_handler
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE