Static task
static1
Behavioral task
behavioral1
Sample
Girder.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Girder.exe
Resource
win10v2004-20231215-en
General
-
Target
51523841eb5b28d2bb556913c91706ab
-
Size
707KB
-
MD5
51523841eb5b28d2bb556913c91706ab
-
SHA1
4db0aacd3537831c3d567edb32d00bf99a88674b
-
SHA256
db733de653d2ef72c9e89ad35aec6b5fda37d0f8b52d8508b14a9a9e06759336
-
SHA512
68547d3194250537bf8a8d72c2c88e41a8b19d97eebf9f7f911e01cea0f75c43d9291136415f5575f6fe23ee37dc58a626b10891ac674af89223c0703168ac6a
-
SSDEEP
12288:ljZPKCFgY85HgQ+cdCmZu453kXpjFQeFSspoWanWxIUhRB95PRnFXpTfrvh8HL:ltKBY8xI8nkXpjKe0gIWxIUx95PRnFXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Girder.exe
Files
-
51523841eb5b28d2bb556913c91706ab.zip
-
Girder.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
file_id.diz
-
tsrh.nfo