gandcrab | 28553532d88fcb4e1515138fa462b45f168b70d41801ce7a4de445f76d0cc322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28553532d88fcb4e1515138fa462b45f168b70d41801ce7a4de445f76d0cc322
Size

92KB
MD5

8fb5ec62c38dbe2ec3593e83b6a3afbc
SHA1

164cd72821371b7a0b97a12d7d6e3e2288ce9574
SHA256

28553532d88fcb4e1515138fa462b45f168b70d41801ce7a4de445f76d0cc322
SHA512

7f592ea62d54528554bbf7fa7cad953c2cad388d30114ea13dca5cbbc2572c8c7afa10463b0044cfc63247ee455d3afbb137d0716bae11f8e954e7f25943724e
SSDEEP

1536:dhhhhhhhhhhhhxuI7h8cSHImJoqqEXq5OMqqU+2bbbAV2/S2TrKUn:zhRAI8oS4OMqqDL2/TrK

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

28553532d88fcb4e1515138fa462b45f168b70d41801ce7a4de445f76d0cc322
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ