fraudGPT_x64.7z
- SHA256 1d03f6f407240bec1113c61fc0e351a7d7fd63251bacdc9543bfa45fb334197d
Static task
static1
1 signatures
General
- Target fraudGPT_x64.7z
- Size 109.6MB
- Sample260508-2tdwcsa14k
- SHA256 1d03f6f407240bec1113c61fc0e351a7d7fd63251bacdc9543bfa45fb334197d
- MD5 731c30c7b843b2c55252c68a7679ca15
- SHA1 e824893d68e2b5bbc0e69281d2db696b36a487d7
- SHA512 b4f48a76350c9ec1df295ed9b9f4ca6dd1823cae789af8b21e66af714250af79e6677f0272d0b5009878f6ce83dfa1a93571b1582b67cdcf4d0fdc4139f09cb3
- SSDEEP 3145728:iakQsBnIvc7+TQmLT+8rNAGL7s5psX2vbcpUa8D7wdso7:iaWnt+TQUS8rNAsy5vbcp27Fo7
- TLSH T1E64833A9E7F8C6E3D93F474A6C5A2488DA86706D627C1231610FD7EE44B36F0434EB49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fraudGPT_x64.exe
File Explorer
-
fraudGPT_x64.7z.7z 109.6MB
-
fraudGPT_x64.exe.exe 120.8MB
fraudGPT_x64.exe
- IMPHASH d3c050ef888f06ae00a6ef5f1f579381
- SHA256 113b865d96bf5d1b6664d019472476fb9fa412695857e914713dbeae5582e9b5
- MD5 f101a346502a324320f952d39e217064
- SHA1 086b75fd461229a1e4046878866dac5a9e86b27c
- SHA512 2a83c25d7b46936c717db9c4231fbebe1b63357cb410891982c07d0a5194a61276e13fca457ee006d0d145bfdc1e873061c204495dd6420cada3c51ecb94558b
- SSDEEP 3145728:qMGMHt8hMknxzRhvKqMWyIY3RFZTo2xh+tkizPLb+:qMRHt86kn9nvKqYnTo24kKX+
- TLSH T1A4582301BA5A5565E05BC874A2034A834F2170EB163BE4FF51D951283FABBF44F3E36A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6117792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ClawCode.pdb
kernel32
GetConsoleMode
GetStdHandle
LoadLibraryA
GetTempPathW
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
Sleep
GetModuleHandleA
SetHandleInformation
WriteFileEx
GetFileInformationByHandle
ReadFileEx
CancelIo
GetOverlappedResult
FormatMessageW
LoadLibraryExA
ReadFile
DeleteFileW
SetFileInformationByHandle
GetFileInformationByHandleEx
GetConsoleWindow
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
FreeConsole
SetFilePointerEx
SetLastError
GetSystemInfo
CloseHandle
GetModuleFileNameW
GetPhysicallyInstalledSystemMemory
CreateFileW
GetTickCount64
FindNextFileW
PostQueuedCompletionStatus
LoadLibraryExW
HeapReAlloc
SetFileCompletionNotificationModes
GlobalSize
CreateIoCompletionPort
GetQueuedCompletionStatusEx
GetFinalPathNameByHandleW
FlushFileBuffers
HeapSize
GetLastError
FindClose
UnmapViewOfFile
VirtualProtect
DuplicateHandle
MapViewOfFile
CreateFileMappingW
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetSystemTimePreciseAsFileTime
GetFileType
SetStdHandle
WriteFile
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleExW
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
CreateDirectoryW
GetFullPathNameW
GetDiskFreeSpaceExW
FindFirstFileExW
SetThreadErrorMode
SetFileTime
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
TerminateProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetACP
FlsSetValue
FlsGetValue
FlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
SetUnhandledExceptionFilter
InitializeSListHead
GetOEMCP
GetCPInfo
IsValidCodePage
SetEnvironmentVariableW
GetStringTypeW
CompareStringW
LCMapStringW
FlsFree
RemoveVectoredExceptionHandler
CreateEventA
GetExitCodeProcess
WaitForMultipleObjects
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateProcessW
CompareStringOrdinal
CreateEventW
ExitProcess
QueryPerformanceCounter
SleepEx
CreateThread
QueryPerformanceFrequency
GetCommandLineW
GetEnvironmentVariableW
MultiByteToWideChar
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetCurrentProcessId
lstrlenW
WaitForSingleObjectEx
GetCurrentDirectoryW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetUserPreferredUILanguages
WideCharToMultiByte
GetCurrentThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
Process32Next
Process32First
CreateToolhelp32Snapshot
SwitchToThread
GetCurrentProcess
SetWaitableTimer
CreateWaitableTimerExW
GetCurrentThreadId
advapi32
RegQueryValueExW
RevertToSelf
ImpersonateAnonymousToken
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
SystemFunction036
GetTokenInformation
OpenProcessToken
oleaut32
SysStringLen
GetErrorInfo
SysFreeString
ntdll
NtWriteFile
NtReadFile
NtCreateFile
NtDeviceIoControlFile
NtCancelIoFileEx
NtOpenFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
ws2_32
WSASocketW
WSASend
connect
getsockopt
shutdown
recv
setsockopt
bind
closesocket
WSAIoctl
WSAStartup
WSACleanup
getaddrinfo
getsockname
freeaddrinfo
send
getpeername
ioctlsocket
WSAGetLastError
bcrypt
BCryptGenRandom
crypt32
CertAddCertificateContextToStore
CertGetCertificateChain
CertFreeCertificateChain
CertDuplicateCertificateContext
CertDuplicateCertificateChain
CertFreeCertificateContext
CertDuplicateStore
CertOpenStore
CertCloseStore
CertVerifyCertificateChainPolicy
CertEnumCertificatesInStore
secur32
InitializeSecurityContextW
QueryContextAttributesW
EncryptMessage
FreeContextBuffer
DeleteSecurityContext
ApplyControlToken
DecryptMessage
AcquireCredentialsHandleA
FreeCredentialsHandle
AcceptSecurityContext
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
user32
OpenClipboard
GetClipboardData
DefWindowProcA
RegisterClassExA
CreateWindowExA
ReleaseDC
GetDC
DestroyIcon
CreateIcon
MapVirtualKeyW
VkKeyScanW
GetCursorPos
SendInput
CloseClipboard
GetWindowLongPtrW
GetSystemMetrics
ShowWindow
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjectsEx
PeekMessageW
RegisterRawInputDevices
SetWindowLongPtrW
MessageBoxW
RedrawWindow
FlashWindowEx
GetClientRect
CreateWindowExW
RegisterClassExW
DestroyWindow
MonitorFromPoint
ValidateRect
SetWindowTextW
TrackPopupMenu
SetMenuDefaultItem
EnableMenuItem
PostMessageW
EmptyClipboard
GetActiveWindow
SendMessageW
SetWindowLongW
LoadCursorW
SetCursor
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
GetMonitorInfoW
MonitorFromWindow
DefWindowProcW
GetRawInputData
GetWindowLongW
GetMenu
AdjustWindowRectEx
MapVirtualKeyExW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
TrackMouseEvent
ScreenToClient
GetTouchInputInfo
MonitorFromRect
CloseTouchInputHandle
GetWindowRect
SetCapture
SystemParametersInfoA
GetClipCursor
ClipCursor
ShowCursor
GetKeyState
IsIconic
SetForegroundWindow
SetWindowDisplayAffinity
RegisterTouchWindow
GetAsyncKeyState
IsProcessDPIAware
SetClipboardData
DestroyCursor
GetForegroundWindow
RegisterWindowMessageA
ChangeDisplaySettingsExW
IsWindowVisible
ClientToScreen
GetSystemMenu
SetWindowPos
InvalidateRgn
shell32
DragQueryFileW
ShellExecuteW
DragFinish
gdi32
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateDIBSection
GetPixelFormat
SetPixelFormat
DescribePixelFormat
CreateRectRgn
GetDeviceCaps
ChoosePixelFormat
SwapBuffers
BitBlt
opengl32
wglMakeCurrent
wglGetCurrentContext
wglGetProcAddress
wglCreateContext
wglDeleteContext
d3dcompiler_47
D3DCompile
ole32
OleInitialize
RegisterDragDrop
CoInitializeEx
CoCreateInstance
RevokeDragDrop
CoUninitialize
imm32
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
uxtheme
SetWindowTheme
dwmapi
DwmSetWindowAttribute
DwmEnableBlurBehindWindow
Name
.text
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114.3MB
Virtual Size
114.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
316KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=144, id=261, version=33145,
count=50, id=260, version=33145,
count=24, id=259, version=33145,
count=9, id=259, version=35403,
count=16, id=260, version=35403,
count=40, id=261, version=35403,
count=11, id=257, version=33145,
count=340, id=1, productName=Unmarked objects,
count=46, productName=Unmarked objects (old),
count=1, id=255, version=35723,
count=1, id=258, version=35723,