gandcrab | 2023-04-15_e43129b1ad940725d3228595d3b1e1d3_gandcrab | Triage

Sharing

General

Target

2023-04-15_e43129b1ad940725d3228595d3b1e1d3_gandcrab
Size

372KB
MD5

e43129b1ad940725d3228595d3b1e1d3
SHA1

419ad4edede8a2be865085f97b5cc97febbe6b2a
SHA256

190eac6a487073d360d8c1b755d343c360e50e21a4456f579917402494a22a65
SHA512

f1a9d088e67f46d7609e48494fa4d65b88c5948ede9e451eb52f22cc34b420b764c92bafafc2073efdd89ccf785f3cd0f7abf5bfcb26539c3074acb3755aa381
SSDEEP

6144:lcytwbs1yTS+xqqDL6HKeddKnXQ9Q2sEqFtQ1Gpb2:Cyis1Rqn6qeddKnX0s9tQ1GY

Score

10^/10

gandcrab

Malware Config

Signatures

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab family
gandcrab

Files

2023-04-15_e43129b1ad940725d3228595d3b1e1d3_gandcrab
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ