gandcrab | 6c9a9c52e2872029d142acaa09ba807d00e7c4a7c0334aee0319ab15cf3cfad5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c9a9c52e2872029d142acaa09ba807d00e7c4a7c0334aee0319ab15cf3cfad5
Size

88KB
MD5

4bfd084c1c8c8973c126936d19d50d9d
SHA1

8f5ee6730b039784cca226dde623f78d369425a3
SHA256

6c9a9c52e2872029d142acaa09ba807d00e7c4a7c0334aee0319ab15cf3cfad5
SHA512

e8eb5664bdda043223c145257a9325d00c61e9dd9d37b0d7bb408b0761c58f6cf4b8be83f3a239d4f8af2e1b5008325b15e48d9172a965e271c44c1508c2b160
SSDEEP

1536:sJJJJJJJJJJJJZoZs2QCTSZPDem1EAMqqU+2bbbAV2/S2uXKEo:35wPj7MqqDL2/uXK

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

6c9a9c52e2872029d142acaa09ba807d00e7c4a7c0334aee0319ab15cf3cfad5
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ