giga_grabber_windows-latest[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

giga_grabber_windows-latest.exe
Size

11.9MB
MD5

22399337123d5648873c41ec174f465c
SHA1

f7b9fdfd38d12a3096f1c8aae1d3cd236df79732
SHA256

1b18df1a49c2d2eb12fb4d1ce1af1833cd20d928811dec58dc34c24c80c1e274
SHA512

36b789a6fe527b666d5f5a34c48e991f960d709b78e84e0bcc1401bc32dc595f179e2dd2ff59fdb0f1515a23840b8649aa1d7432bfdd0152ec13977281bd5aca
SSDEEP

98304:elD9m+edtt0Bzy4Hl2ZSRgFXa3NcDG2dH6b7TJrSYu+zvmp:KdiAcKsyZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
giga_grabber_windows-latest.exe

Files

giga_grabber_windows-latest.exe
.exe windows:6 windows x64 arch:x64

ed16e882287a23df58f9d03489b64474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\giga-grabber\giga-grabber\target\release\deps\giga_grabber.pdb

Imports

kernel32

HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
CloseHandle
GetSystemInfo
HeapReAlloc
GetLastError
WaitForSingleObject
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SwitchToThread
DeleteFileW
MoveFileExW
AddVectoredExceptionHandler
SetThreadStackGuarantee
SetThreadErrorMode
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcessId
CreateMutexA
GetProcAddress
GetCurrentProcess
ReleaseMutex
RtlLookupFunctionEntry
GetCurrentThread
RtlCaptureContext
GlobalUnlock
GlobalFree
LoadLibraryExW
GetQueuedCompletionStatusEx
SetLastError
GetFinalPathNameByHandleW
PostQueuedCompletionStatus
TryAcquireSRWLockExclusive
CreateIoCompletionPort
SetFileCompletionNotificationModes
lstrlenW
Sleep
GetModuleHandleA
SleepConditionVariableSRW
WakeConditionVariable
WakeAllConditionVariable
QueryPerformanceCounter
QueryPerformanceFrequency
AcquireSRWLockShared
ReleaseSRWLockShared
GetStdHandle
GetConsoleMode
MultiByteToWideChar
WriteConsoleW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetModuleHandleW
FormatMessageW
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFullPathNameW
SetFilePointerEx
CreateDirectoryW
FindFirstFileW
FindClose
CreateThread
SetHandleInformation
FreeLibrary
RemoveVectoredExceptionHandler
CreateEventA
GlobalLock
GlobalSize
WideCharToMultiByte
GlobalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent

user32

SetWindowLongW
GetClipCursor
ClipCursor
ShowCursor
GetClientRect
EmptyClipboard
GetForegroundWindow
CloseClipboard
GetClipboardData
OpenClipboard
MapVirtualKeyW
SendInput
SetForegroundWindow
SetClipboardData
MonitorFromWindow
ShowWindow
GetWindowLongPtrW
SetWindowTextW
SystemParametersInfoA
RedrawWindow
RegisterClassExW
CreateWindowExW
GetWindowRect
SetWindowLongPtrW
GetMessageW
RegisterRawInputDevices
MonitorFromPoint
GetMonitorInfoW
TranslateMessage
DispatchMessageW
ClientToScreen
CreateIcon
AdjustWindowRectEx
GetMenu
GetWindowLongW
PostThreadMessageW
PeekMessageW
GetKeyState
ToUnicodeEx
GetKeyboardLayout
ReleaseCapture
IsWindowVisible
RegisterWindowMessageA
PostMessageW
MsgWaitForMultipleObjectsEx
LoadCursorW
SetCursor
FlashWindowEx
GetActiveWindow
SendMessageW
InvalidateRgn
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
GetUpdateRect
ValidateRect
GetRawInputData
SetWindowPos
MonitorFromRect
CloseTouchInputHandle
GetTouchInputInfo
TrackMouseEvent
SetCapture
ScreenToClient
IsProcessDPIAware
GetDC
RegisterTouchWindow
GetSystemMetrics
DefWindowProcW
MapVirtualKeyA
GetKeyboardState
DestroyIcon
DestroyWindow
GetCursorPos

ntdll

NtWriteFile
NtCancelIoFileEx
NtReadFile
RtlNtStatusToDosError
NtCreateFile
NtDeviceIoControlFile

winmm

timeBeginPeriod
timeGetDevCaps
timeEndPeriod

crypt32

CertFreeCertificateContext
CertGetCertificateChain
CertDuplicateStore
CertAddCertificateContextToStore
CertCloseStore
CertDuplicateCertificateContext
CertFreeCertificateChain
CertEnumCertificatesInStore
CertVerifyCertificateChainPolicy
CertOpenStore
CertDuplicateCertificateChain

imm32

ImmAssociateContextEx
ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext

gdi32

GetDeviceCaps
DeleteObject
CreateRectRgn

dwmapi

DwmEnableBlurBehindWindow

ole32

RevokeDragDrop
RegisterDragDrop
OleInitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize

bcrypt

BCryptGenRandom

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
SystemFunction036

ws2_32

WSASocketW
ioctlsocket
WSAIoctl
bind
connect
getsockname
shutdown
getaddrinfo
freeaddrinfo
setsockopt
WSAStartup
closesocket
WSACleanup
recv
send
WSASend
socket
WSAGetLastError
getsockopt
getpeername

shell32

SHCreateItemFromParsingName
DragQueryFileW
DragFinish
SHGetKnownFolderPath

secur32

FreeContextBuffer
DeleteSecurityContext
EncryptMessage
FreeCredentialsHandle
ApplyControlToken
AcceptSecurityContext
InitializeSecurityContextW
QueryContextAttributesW
DecryptMessage
AcquireCredentialsHandleA

d3dcompiler_47

D3DCompile

oleaut32

GetErrorInfo
SysStringLen
SysFreeString

uxtheme

SetWindowTheme

vcruntime140

__CxxFrameHandler3
__current_exception_context
__current_exception
memcmp
memset
memmove
_CxxThrowException
__C_specific_handler
memcpy

api-ms-win-crt-math-l1-1-0

cosf
floor
sinf
trunc
floorf
roundf
truncf
exp2f
exp2
powf
round
_hypotf
ceilf
fmodf
_hypot
fmod
cos
sin
atan2
pow
tan
acos
__setusermatherr
acosf
ceil

api-ms-win-crt-string-l1-1-0

wcslen
strlen

api-ms-win-crt-runtime-l1-1-0

strerror
_set_app_type
terminate
_configure_narrow_argv
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
_initterm_e
_seh_filter_exe
__p___argc
_exit
exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed16e882287a23df58f9d03489b64474

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ntdll

winmm

crypt32

imm32

gdi32

dwmapi

ole32

bcrypt

advapi32

ws2_32

shell32

secur32

d3dcompiler_47

oleaut32

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 8.9MB - Virtual size: 8.9MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 295KB - Virtual size: 295KB

.reloc Size: 46KB - Virtual size: 46KB

.text
Size: 8.9MB - Virtual size: 8.9MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 295KB - Virtual size: 295KB

.reloc
Size: 46KB - Virtual size: 46KB