Behavioral task
behavioral1
Sample
ba715233278fa4exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
ba715233278fa4exeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
ba715233278fa4exeexeexeex.exe
-
Size
1.6MB
-
MD5
ba715233278fa412a8668343f7f43f7f
-
SHA1
5fddb3352daa3ab850f96baf2e92912c2561c0ec
-
SHA256
377b0169e644cd16f79549d943c46722594a0045a3e0c748e2ae90cd72f5bf17
-
SHA512
07fb42d260904700cfe566c639d44656e6abde66de6a4177e7b43b471687af46120c7ec4d78137eb1c730f9ee7d19c862aa7f24958a54b48bd0931ba58dfdd3f
-
SSDEEP
6144:RpfPyvusnuuocdqqDL6QSvdv2zU+oI9loqt+WsipQ5UAg:RpHymbqn6Fv8U+J92qgRiGuA
Malware Config
Signatures
-
GandCrab payload 1 IoCs
resource yara_rule sample family_gandcrab -
Gandcrab family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba715233278fa4exeexeexeex.exe
Files
-
ba715233278fa4exeexeexeex.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ