gcleaner | 1716-515-0x0000000000400000-0x0000000000C71000-memory[.]dmp | Triage

Sharing

General

Target

1716-515-0x0000000000400000-0x0000000000C71000-memory.dmp
Size

8.4MB
MD5

5abc79ee4ee7896e063927d02c9203ab
SHA1

4fe4dbbaf8dd5be4e1f9b6dce455d6af2fcf4679
SHA256

7ee1f7b7d7f591f5cca845f0370e9e95666a4f048ec5102cc83ecf6575099fe8
SHA512

2b30a156dfa31883998a47292766f8f4e541f94670901344041432a3b16134f0dcec9a3522ac476c6aa1a9c0848146d44bbd74027476af68dc7dbebba567a5ae
SSDEEP

49152:vjilq7Y9Xo4GqPGehCxFh4Ws2OtU3YnNyqN9UneONweQVmC75SS6:vjilyYlo4GqPGeECH2OelS9/ewmCn6

Score

10^/10

gcleaner

Malware Config

Signatures

Gcleaner family
gcleaner

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1716-515-0x0000000000400000-0x0000000000C71000-memory.dmp

Files

1716-515-0x0000000000400000-0x0000000000C71000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ