gandcrab | e370c063b58a8cc225d4053bf7badfba1db0adf0880fe6f03d3126828801fa38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e370c063b58a8cc225d4053bf7badfba1db0adf0880fe6f03d3126828801fa38
Size

69KB
MD5

d77522892a4a13cad76ab574f17da0a2
SHA1

76f1915e07df953688acd180e7bb4460a2b96af6
SHA256

e370c063b58a8cc225d4053bf7badfba1db0adf0880fe6f03d3126828801fa38
SHA512

963448344db9af9a5980a97b0347ed6f3e2af27f413523910774abe21119fe5e15f0942c47d5041abc1c792d10629937b9955fb268eb47952c3f7d366f63e5cc
SSDEEP

1536:UEZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2Lccu:UaBounVyFHjMqqDL2/Lcc

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

e370c063b58a8cc225d4053bf7badfba1db0adf0880fe6f03d3126828801fa38
.exe windows

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_ReflectiveLoader@0

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ