GrivSpy[.]exe | Triage

Resubmissions

09/05/2024, 17:22

240509-vx12qsgf42 3

09/05/2024, 17:20

240509-vwsc7sdd31 3

Sharing

Copy URL Twitter E-mail

General

Target

GrivSpy.exe
Size

1.0MB
MD5

41a5c1958b1ad6bd52df0cce4a4935fd
SHA1

76ee253d61282cf681d7077c0f3f326bf89abcf5
SHA256

89ff7fe99eef51ef7394f169451553f5e61c4a93e7eb58f58b841b4210228d1c
SHA512

0df0bf55b2b1b4b531b0c94f4e2a0b1323c37fa68bc04b1c9f5c72251147c79d80677ae1d836e30f30dcc4ba138bd784be43f7c312557c956bfad4d7ad7d4abf
SSDEEP

12288:CUl3/53c/hayNHpgMUe8RkkFnKEtjMFVst:Cq6/vdUX8EtjMDs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GrivSpy.exe

Files

GrivSpy.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 629KB - Virtual size: 629KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ