Overview
overview
8Static
static
8GifSplitter.exe
windows7-x64
8GifSplitter.exe
windows10-2004-x64
8out.exe
windows7-x64
3out.exe
windows10-2004-x64
3GifSplitter.exe.xml
windows7-x64
1GifSplitter.exe.xml
windows10-2004-x64
1GifSplitter.ini
windows7-x64
1GifSplitter.ini
windows10-2004-x64
1License.txt
windows7-x64
1License.txt
windows10-2004-x64
1Behavioral task
behavioral1
Sample
GifSplitter.exe
Resource
win7-20220812-es
Behavioral task
behavioral2
Sample
GifSplitter.exe
Resource
win10v2004-20221111-es
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20221111-es
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20220812-es
Behavioral task
behavioral5
Sample
GifSplitter.exe.xml
Resource
win7-20220901-es
Behavioral task
behavioral6
Sample
GifSplitter.exe.xml
Resource
win10v2004-20220812-es
Behavioral task
behavioral7
Sample
GifSplitter.ini
Resource
win7-20221111-es
Behavioral task
behavioral8
Sample
GifSplitter.ini
Resource
win10v2004-20221111-es
Behavioral task
behavioral9
Sample
License.txt
Resource
win7-20220812-es
Behavioral task
behavioral10
Sample
License.txt
Resource
win10v2004-20221111-es
General
-
Target
Gif Splitter.rar
-
Size
32KB
-
MD5
143728dc3d33434a7f6d8ca3b1380028
-
SHA1
80bbed1a69bdacb0856a66a395ea5ae6afb062ba
-
SHA256
3455d719f1bde8be05770b7e65ba6b5aabf28c569f053c5a2c65564cf232870d
-
SHA512
2a6fddfbb5a6d5f918458123807298801a467c8ff6acae316611d38d7f3ae23ef5aad2bd1ddb8cd94c571f6956909ea825346d956a07916d495c4aa50fcb722b
-
SSDEEP
768:AHWA4t9IGM8loVFt4NihsW6/7ZKffE2VxcRLK:I4kGcVFt5hg9K0scdK
Malware Config
Signatures
-
resource yara_rule static1/unpack001/GifSplitter.exe upx
Files
-
Gif Splitter.rar.rar
-
GifSplitter.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
GifSplitter.exe.manifest.xml
-
GifSplitter.ini
-
License.txt