Static task
static1
Behavioral task
behavioral1
Sample
GayPal.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GayPal.exe
Resource
win10v2004-20220812-en
General
-
Target
GayPal.exe
-
Size
10.1MB
-
MD5
d824172edb3a490627b83ff7095ccad2
-
SHA1
512e21428fd660bbd54dae7c4e06d9737b93fa4e
-
SHA256
001fc08511d2bc5fecea78ca63dbc34416e192535437448f418089040756be89
-
SHA512
508b2df7ba69c41be66192ec2794774cb813ac46b3903b4482366767c9a0efcfec21d066b19be8e5da7f4a4ec29a6083c54a54abdcf313125f5c55d1af7f5076
-
SSDEEP
196608:L7usY6gEykTxF1FIrUmPahGSiMymLXX1z2NyY2VPRwYp3+fyLZZ:L6WPxN6UmPgWDmLnd0KcYp3+iZZ
Malware Config
Signatures
Files
-
GayPal.exe.exe windows x64
Password: 123456
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
.textbss Size: 5.9MB - Virtual size: 14.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 455KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ