gandcrab | 6ad534c32ba7dd435302c98d7ff83b081287159435125de165ab6ec14b25238f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ad534c32ba7dd435302c98d7ff83b081287159435125de165ab6ec14b25238f
Size

92KB
MD5

65d25bff798342c11a539ce6123f9ac5
SHA1

2b8891ba1386b779e9a612a99c324aff21c8c4aa
SHA256

6ad534c32ba7dd435302c98d7ff83b081287159435125de165ab6ec14b25238f
SHA512

9d8d8a61b634fec2039573d5b13bb3a16cdcb70410ce0dfdc524d02191cb7afc17ae124c5e87c1d19156db3bcd3885d7343884ceed025ff2154b3b14a23d7ca8
SSDEEP

1536:sIiIiIiIiIiIiIiIiIiIiIiIiISoP3y3NSidIQkaoOFJ1SE3LaMqqU+2bbbAV2/f:Vrrrrrrrrrrrr9ydZdIo9z1j2MqqDL2j

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

6ad534c32ba7dd435302c98d7ff83b081287159435125de165ab6ec14b25238f
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ