Static task
static1
Behavioral task
behavioral1
Sample
GalePortable20821/Gale.chm
Resource
win10v2004-20230220-es
Behavioral task
behavioral2
Sample
GalePortable20821/GaleBrowse.exe
Resource
win10v2004-20230221-es
Behavioral task
behavioral3
Sample
GalePortable20821/GaleUS.chm
Resource
win10v2004-20230220-es
Behavioral task
behavioral4
Sample
GalePortable20821/gale.exe
Resource
win10v2004-20230220-es
General
-
Target
GalePortable20821.7z
-
Size
1.6MB
-
MD5
4c770cf37f461a99947c14c7662a7f92
-
SHA1
010c4f6d8b234fc96628f697c6c0f56ae36065c8
-
SHA256
bc707660c78e94e5c791538e3e4036fad56c85de51545f5c2489d5794b8c65cc
-
SHA512
4b0e10f3b6b6b5b5baf3593472d76990a04a708b41d7602438456df35f99c5fcf8acc1ddff9ed65213311b386753511b12ec36b1246da37dffe9f5771f0d90f0
-
SSDEEP
49152:IUqPARvDiHNCfNhO4feQSByVzzzYYAC/dn+:MABDiHaXO4mQSQtYmFn+
Malware Config
Signatures
Files
-
GalePortable20821.7z.7z
-
GalePortable20821/Gale.chm.chm
-
GalePortable20821/GaleBrowse.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 986KB - Virtual size: 986KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 104B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
GalePortable20821/GaleUS.chm.chm
-
GalePortable20821/Image1.gal
-
GalePortable20821/config/default.pal
-
GalePortable20821/config/popup.ini
-
GalePortable20821/config/setting.ini
-
GalePortable20821/config/size.ini
-
GalePortable20821/gale.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 17KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 124B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
GalePortable20821/history.txt
-
GalePortable20821/historyUS.txt
-
GalePortable20821/lang/English.txt
-
GalePortable20821/lang/Japanese.txt
-
GalePortable20821/license.txt
-
GalePortable20821/licenseUS.txt
-
GalePortable20821/sample1.gal
-
GalePortable20821/sample2.gal