Static task
static1
Behavioral task
behavioral1
Sample
GDock_11_03_12_1/G.Dock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
GDock_11_03_12_1/G.Dock.exe
Resource
win10v2004-20240802-en
General
-
Target
a20db30e61e32c235a3d3d834ec9e64a_JaffaCakes118
-
Size
64KB
-
MD5
a20db30e61e32c235a3d3d834ec9e64a
-
SHA1
e1dd3d52de08955968260e2f000265c74280470f
-
SHA256
197fd646f83e267818e0bdc95affece09b82422658b69c540f8bb98f79b3603c
-
SHA512
3e8bff4a8453fc60c8c00d25db273f2fd2535c7bc4d310542beed2fc155e16bdf5a998173cb36e8f1be05a18cbe6569aa668eca6a38fa2e08b10d4ca1b5fffcd
-
SSDEEP
1536:/EfaB28os51B88xZ1p0nlSjla/n52OBObw1qShIVg/531urt9K9:/9as51B8831ynlka/31qK/Row
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/GDock_11_03_12_1/G.Dock.exe
Files
-
a20db30e61e32c235a3d3d834ec9e64a_JaffaCakes118.rar
-
GDock_11_03_12_1/G.Dock.exe.exe windows:4 windows x86 arch:x86
b4e0df28aaf311655e282d033366d7a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
GetPrivateProfileStringA
CloseHandle
ReadFile
GetFileSize
CreateFileA
DeleteFileA
WriteFile
WritePrivateProfileStringA
GetTickCount
LCMapStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
GetOEMCP
FreeLibrary
GetCPInfo
VirtualAlloc
RaiseException
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
LoadLibraryA
MultiByteToWideChar
LocalFree
LocalAlloc
lstrcmpiA
lstrlenA
GetACP
GetModuleHandleA
user32
DestroyMenu
EndDialog
PtInRect
GetSubMenu
CheckMenuItem
TrackPopupMenu
EnableMenuItem
KillTimer
GetCursorPos
SetWindowTextA
GetDlgItem
GetWindowTextA
RegisterHotKey
IsDlgButtonChecked
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
FillRect
UpdateLayeredWindow
MessageBoxA
wsprintfA
UnregisterHotKey
SetTimer
SetWindowPos
LoadMenuA
DialogBoxParamA
SystemParametersInfoA
ReleaseCapture
SendMessageA
CheckDlgButton
GetWindowRect
shell32
DragQueryFileA
ShellExecuteA
DragAcceptFiles
DragFinish
ole32
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
gdiplus
GdipGetImageWidth
GdipGetImageHeight
GdipLoadImageFromFile
GdipDisposeImage
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipCreateFontFamilyFromName
GdipCreatePen1
GdipCreateSolidFill
GdipLoadImageFromStream
GdipDisposeImageAttributes
GdipDeleteBrush
GdipDeletePen
GdipDeleteFontFamily
GdipDeleteGraphics
GdipGraphicsClear
GdipDrawImageRect
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipCreatePath
GdipAddPathString
GdiplusStartup
GdipCreateImageAttributes
GdipDeletePath
GdipFillPath
GdipDrawPath
GdipSetPenLineJoin
comdlg32
GetOpenFileNameA
gdi32
CreateCompatibleDC
SelectObject
CreateSolidBrush
DeleteObject
DeleteDC
BitBlt
CreateDIBSection
shlwapi
PathFileExistsA
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
GDock_11_03_12_1/res/0.png.png
-
GDock_11_03_12_1/res/1.png.png
-
GDock_11_03_12_1/res/2.png.png
-
GDock_11_03_12_1/res/_0.png.png
-
GDock_11_03_12_1/res/_1.png.png