gandcrab | 75724ba1caaf12bcae5b6d8a80423f3f06e80db3311d95c014c3431f9854886c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75724ba1caaf12bcae5b6d8a80423f3f06e80db3311d95c014c3431f9854886c
Size

92KB
MD5

b0cb4085cf52a90d244368dc7096493c
SHA1

b5911ffb5a89faa5d6ba264d73f7f77f8d9f6bf3
SHA256

75724ba1caaf12bcae5b6d8a80423f3f06e80db3311d95c014c3431f9854886c
SHA512

127d15622ff8bde6a9725914f315a0e0cb5c4650eecda73fb73c11f374ef2ca2c86f70956e53cf4058e3ab89afb54dacedb5d9ceac5bc34f0883dd2847439de0
SSDEEP

1536:XxxxxxxxxxxxxB3pSdESNa45CtaCk1hMqqU+2bbbAV2/S2Awvd239:lfoaYoa3MqqDL2/Awvd

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

75724ba1caaf12bcae5b6d8a80423f3f06e80db3311d95c014c3431f9854886c
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ