Static task
static1
Behavioral task
behavioral1
Sample
CareGyniolatry.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
CareGyniolatry.exe
Resource
win10v2004-20220812-en
General
-
Target
CareGyniolatry.exe
-
Size
300KB
-
MD5
daad2e45de1244b6e69a4b23d9b44ee8
-
SHA1
05c20e7cbfc1d3e5bbc0b90789d3013d66e58fa5
-
SHA256
75da204b1db0b07e9a786dd417502ba7a3b9662ed98d203047e6ef31851478ac
-
SHA512
8b2b63396b5d1cd30f036d82db7d03e0a98b37bcee36e3dfb5104df03b662e42641419c420e3f53fb81d3ec339a2e64627094fe5d21d5c138db98bda7c868861
-
SSDEEP
6144:G8iiiKqwIGBBIspG8md3XBxjIBLdDcvBzgaKqhA2g:tHsGBBISG8mdHorDWBcE
Malware Config
Signatures
Files
-
CareGyniolatry.exe.exe windows x86
07435f16da9029fd6eddc0cf898ffd9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
UnhandledExceptionFilter
GetModuleFileNameA
HeapUnlock
InterlockedDecrement
GetLocaleInfoW
InterlockedIncrement
_hread
GetCommTimeouts
GetSystemDirectoryW
CreateEventW
WriteConsoleA
BuildCommDCBW
AddConsoleAliasW
PeekConsoleInputW
EnumDateFormatsW
SetEvent
UnregisterWait
LoadLibraryA
VerifyVersionInfoW
WaitNamedPipeA
CreateMutexW
FindResourceExW
VirtualProtect
GetFirmwareEnvironmentVariableW
BeginUpdateResourceA
GetConsoleAliasExesLengthW
EnumTimeFormatsW
DeleteFileA
WriteConsoleOutputCharacterA
WriteConsoleW
GetProcAddress
GetUserDefaultLangID
GetSystemWindowsDirectoryA
FindFirstChangeNotificationW
GlobalAddAtomW
HeapWalk
RemoveDirectoryA
AreFileApisANSI
GetCurrentDirectoryW
SetFileAttributesA
SetConsoleTitleA
GetNumaHighestNodeNumber
GetLongPathNameW
GlobalAlloc
GetThreadLocale
GetSystemDefaultLangID
SetLastError
GetCommMask
GetComputerNameExW
FindNextFileW
InitializeCriticalSection
EnumCalendarInfoW
_lopen
ReadConsoleOutputCharacterW
EnumSystemLocalesW
GetComputerNameA
GetLastError
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
HeapAlloc
HeapFree
IsProcessorFeaturePresent
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThreadId
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
CloseHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapReAlloc
CreateFileW
Sections
.text Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vawe Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tezoje Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ