Overview
overview
3Static
static
3Gold-Dork-...in.vbs
windows7-x64
1Gold-Dork-...in.vbs
windows10-2004-x64
1Gold-Dork-...es.vbs
windows7-x64
1Gold-Dork-...es.vbs
windows10-2004-x64
1Gold-Dork-...pp.xml
windows7-x64
1Gold-Dork-...pp.xml
windows10-2004-x64
1Gold-Dork-...UI.dll
windows7-x64
1Gold-Dork-...UI.dll
windows10-2004-x64
1Gold-Dork-...et.dll
windows7-x64
1Gold-Dork-...et.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Main.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Main.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Resources.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Resources.vbs
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/app.xml
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/app.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Guna.UI.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Guna.UI.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Leaf.xNet.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Leaf.xNet.dll
Resource
win10v2004-20230220-en
General
-
Target
Gold-Dork-Parser-1.0.0.zip
-
Size
788KB
-
MD5
4d961193084695492bb742119a89e15d
-
SHA1
6ce8ec6981f692ccefa046110cd5fd032cce2280
-
SHA256
6476f2fd3361b5a39cc14a73d76c0a17779fa98c87e49b626ec7784d072d45b4
-
SHA512
999fb1ebcd792ba01c8d4cd44e36edd857408e9d548ce5929c544829ce7401dd31b43ef51ab066bfa4337f17f6bbd887ba0891e11f54f442f00e20944969586e
-
SSDEEP
12288:tzb+xLnf+3zdE4gw/bSxq9e+2qJPm97tHqDuTuvfR3x8sfIRa+8U2rmB1g+tIWhB:tH+VfezyzwexGmqJP9uTuv5BvephWe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gold-Dork-Parser-1.0.0/Gold Dork Parser/Leaf.xNet.dll
Files
-
Gold-Dork-Parser-1.0.0.zip.zip
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser.sln
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Gold Dork Parser.csproj
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Gold Dork Parser.ico
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Main.Designer.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Main.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Main.resx.vbs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Program.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/AssemblyInfo.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Resources.cs.vbs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Resources.resources
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Settings.Designer.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Properties/Settings.settings
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/Utilis.cs
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/app.config.xml
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/app.manifest
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/Gold Dork Parser.csproj.AssemblyReference.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/Gold Dork Parser.csproj.CoreCompileInputs.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/Gold Dork Parser.csproj.FileListAbsolute.txt
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/Gold Dork Parser.csproj.GenerateResource.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Debug/Gold_Dork_Parser.Main.resources
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/DesignTimeResolveAssemblyReferences.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/Gold Dork Parser.csproj.CoreCompileInputs.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/Gold Dork Parser.csproj.FileListAbsolute.txt
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/Gold Dork Parser.csproj.GenerateResource.cache
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Gold Dork Parser/obj/Release/Gold_Dork_Parser.Main.resources
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Guna.UI.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate
IssuerCN=Sobatdata Root CANot Before23/10/2019, 05:22Not After22/10/2025, 17:00SubjectCN=Sobatdata Software03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4Signer
Actual PE Digest3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Sobatdata Software23/03/2020, 08:52 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Gold-Dork-Parser-1.0.0/Gold Dork Parser/Leaf.xNet.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Gold-Dork-Parser-1.0.0/README.md