GDI1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GDI1.exe
Size

8KB
MD5

75a0e9f74728cbd18b7290aebdc4da24
SHA1

fc29ce8818d7fccb5c5dbcdee32df06b17f66862
SHA256

d6df4b4111ec5e1ff89f90c60d634c8018a8d4ebcf8517530823380873b876ed
SHA512

aad0db2c8cb335d9f5c1374367324a3448a54fc97cd27ff70fb4bfe540d5bfaaa302058ca1bfe694135c15202093752aa927c69dbaf7a464e2eeb3626f83351a
SSDEEP

192:73eo+51zv03LX1twQ6Hj0Z5+OH1e/7VdK8/a0due:73eZDc7XEQBn+OH1e/7Vdx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GDI1.exe

Files

GDI1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Straqbery\source\repos\GDI1\GDI1\obj\Debug\GDI1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ