Behavioral task
behavioral1
Sample
772-74-0x0000000000400000-0x000000000137D000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
772-74-0x0000000000400000-0x000000000137D000-memory.exe
Resource
win10v2004-20220901-en
General
-
Target
772-74-0x0000000000400000-0x000000000137D000-memory.dmp
-
Size
15.5MB
-
MD5
6764d6802fd3f2d1d2127f62717ba83b
-
SHA1
836f501f45273a12dd3993e97ea1950a4e773169
-
SHA256
391eab414f5490cb781e4dbb636ec9554f3d31168e612f1f28044ccd0f2d6c67
-
SHA512
47c920a9d412a13ea9b51f63f124af24c0092e23e08cb8739ea844f1c0096b2f3aeec1aeaa8db0c169ac8604c36c88c007dbf22d1429a5e1d22204485420e660
-
SSDEEP
12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0qyHLOSfmiaG:S3JNBvaSO6
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Signatures
-
Gcleaner family
Files
-
772-74-0x0000000000400000-0x000000000137D000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ