Static task
static1
General
-
Target
gorillataggingkid-menu_6_1_11.zip
-
Size
22KB
-
MD5
6a168e8b8888ccbe0f6e3ca1c3c4296b
-
SHA1
f7ddb1af5330e409f77a1ac25a18c6d952c75326
-
SHA256
f2bac2dd669e2890703a11e23024da581521642d0e9bbb399c7a96936b6940cd
-
SHA512
9dfdc77393ef660aa74affcd7faae2df1d95fc6d53ca6354d4b523103c9bb6c332db591c5aa6c4442b321d3e5db65295ef48c6c0599683047a310af1b1e16cab
-
SSDEEP
384:SX37eIOGSuVSliB/Frq2QmK5Zl0p7HDswmQAbP0r5VvbVUyZQC/HhChgfpZ3+Art:837exWX9rqFHX0pz/mJbEvd/HhIgfuut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/GorillaTaggingKid-Menu_6_1_11 - Copy.dll
Files
-
gorillataggingkid-menu_6_1_11.zip.zip
-
GorillaTaggingKid-Menu_6_1_11 - Copy.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ