Static task
static1
Behavioral task
behavioral1
Sample
2024-10-04_a55b30219e3e9904a66e9655db9be621_gandcrab.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-10-04_a55b30219e3e9904a66e9655db9be621_gandcrab.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-04_a55b30219e3e9904a66e9655db9be621_gandcrab
-
Size
1020KB
-
MD5
a55b30219e3e9904a66e9655db9be621
-
SHA1
4295e1a2a129464dcf63a02feb0a1dd1ce67a808
-
SHA256
3c8898fd5e3d96ec19fd9034dd31f205fc2e7a4c82e4670b198da8ea1b73271d
-
SHA512
529db7c8066cce4d79c5a94e9095c1d743a14ba0036a3a4938cf54df0625eac76ad6f0f1c20fafec50d5299de764fa15ba48b2299b33a721979020010757119f
-
SSDEEP
6144:dWaWeypXMLWFrMXs8MEs5sNN99LKcg5Rli3G+XjiSrQ0KsriiR6LK18TdM1U9NA4:wlWWe9Nx3GybQ0j/RoTNA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-04_a55b30219e3e9904a66e9655db9be621_gandcrab
Files
-
2024-10-04_a55b30219e3e9904a66e9655db9be621_gandcrab.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ