General

  • Target

    NA_00b9765a86cfc1exe_JC.exe

  • Size

    126KB

  • MD5

    00b9765a86cfc11afc433b6f9b570ac0

  • SHA1

    868967f0d8f6f825ca0f8e74facb0f42eb5b1c39

  • SHA256

    a0f81d3b44325fee0f7d76ed39a4b82a2989e84ebb79a38034d959a6b0e7ab6b

  • SHA512

    f4d28b9ea91e4bb6b03e45dca473da1e7590a758bd4090f1b2a0b2a34b4403d1d2b2699f70fac4a80af0d17dcb6bcc8b7582fe6a70eddc55e6cd4f60e2dda96b

  • SSDEEP

    1536:lZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHks:5BounVyFHFMqqDL2/LgHkc2oYvQd2a

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_00b9765a86cfc1exe_JC.exe
    .exe windows x86


    Headers

    Exports

    Sections