gandcrab | 2023-04-10_8e7e868aecdb2bb6a37098c12209cef2_gandcrab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-04-10_8e7e868aecdb2bb6a37098c12209cef2_gandcrab
Size

7.7MB
MD5

8e7e868aecdb2bb6a37098c12209cef2
SHA1

d318cf07f1096c65ce77d5a66d566e6e19e18ca3
SHA256

6c99f37a8b97cefec6ebd831e754a69615a70ed340c667b09e95fe20c62595a6
SHA512

f1ed9378fbb2845cd6640224b8fea3969296a5c9331932160c198aacc76814b67fe8f910e3286a57afa6dc217c8a722c9c0a228374891e09df1119e4d1366c70
SSDEEP

6144:lcytwb61yTS+xqqDL6HKXoebH3rYK3z1:Cyi61Rqn6qXoebXkk

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

2023-04-10_8e7e868aecdb2bb6a37098c12209cef2_gandcrab
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ