gorille[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
gorille.exe
Size 505KB
Sample260729-b3axystvhs
SHA256 aaeec2847c17e4cd507532e048820e159fcff626b3d439d59a07a08f6396955b
MD5 8a1b5b4296d3cb355a7f11fc9d0e96b8
SHA1 932b809503d8bb47ade3521cfc74bcf1d3a58607
SHA512 1cd631276acc98221d69177a3e2c9ec6d0e7cd88ee93d1a2a44fd83b4891f0b90d4457cc7ddad2f2eb45953d2d36007c0dfdc95f75377108acf438ccbe700bff
SSDEEP 12288:pU9W7AEBBo7UKurYc0WniZJcztnqoXEHF:pxB6WRpnpo
TLSH
T109B4281563B1079ADA6B4037C18FF717A87B704C2BD755CF7BA408983F61BE185AAB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gorille.exe

File Explorer

gorille.exe

.exe 505KB

gorille.exe

IMPHASH 0db43863a3ed6d489321dcd5c45ec7da
SHA256 aaeec2847c17e4cd507532e048820e159fcff626b3d439d59a07a08f6396955b
MD5 8a1b5b4296d3cb355a7f11fc9d0e96b8
SHA1 932b809503d8bb47ade3521cfc74bcf1d3a58607
SHA512 1cd631276acc98221d69177a3e2c9ec6d0e7cd88ee93d1a2a44fd83b4891f0b90d4457cc7ddad2f2eb45953d2d36007c0dfdc95f75377108acf438ccbe700bff
SSDEEP 12288:pU9W7AEBBo7UKurYc0WniZJcztnqoXEHF:pxB6WRpnpo
TLSH
T109B4281563B1079ADA6B4037C18FF717A87B704C2BD755CF7BA408983F61BE185AAB20
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

317908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\chais\source\repos\monkeylol\x64\Release\monkeylol.pdb

opengl32

glDeleteTextures glTexCoordPointer glTexImage2D glColorPointer glGetIntegerv glPushAttrib glOrtho glPixelStorei glClear glPushMatrix glDisable glTexParameteri glLoadIdentity glBlendFunc glMatrixMode glDisableClientState glScissor glEnable glVertexPointer glGenTextures glBindTexture glPolygonMode glPopAttrib glEnableClientState glViewport glPopMatrix glClearColor glDrawElements

kernel32

InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW InitializeSListHead GetCurrentProcess Sleep GetTempPathA DeleteFileA CloseHandle Beep GetThreadId GetConsoleWindow GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetModuleHandleW SetThreadExecutionState MultiByteToWideChar InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree VerSetConditionMask GetLastError FreeLibrary GetModuleHandleExW GetProcAddress LoadLibraryA FormatMessageW WideCharToMultiByte QueryPerformanceCounter QueryPerformanceFrequency RtlCaptureContext GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry

user32

ChangeDisplaySettingsExW ToUnicode EnumDisplaySettingsW RegisterDeviceNotificationW RegisterRawInputDevices EnumDisplayDevicesW EnumDisplayMonitors GetRawInputDeviceInfoA GetRawInputDeviceList UnregisterDeviceNotification GetRawInputData GetMonitorInfoW MonitorFromWindow SystemParametersInfoW LoadImageW DestroyIcon LoadCursorW SetWindowLongW GetWindowLongW PtInRect OffsetRect SetRect ClipCursor WindowFromPoint ScreenToClient ClientToScreen SetCursor SetCursorPos AdjustWindowRectEx GetClientRect RemovePropW GetPropW SetPropW ReleaseDC GetDC SetForegroundWindow ReleaseCapture SetCapture MapVirtualKeyW GetKeyState GetActiveWindow SetFocus IsZoomed BringWindowToTop IsIconic IsWindowVisible SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcW SendInput GetMessageTime PeekMessageW DispatchMessageW TrackMouseEvent OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetMessageA DispatchMessageA CallNextHookEx GetSystemMetrics ShowWindow GetAsyncKeyState PostThreadMessageA SetWindowsHookExA GetWindowTextA MessageBoxA GetForegroundWindow UnhookWindowsHookEx TranslateMessage GetCursorPos

gdi32

CreateRectRgn DeleteDC GetDeviceCaps SetDeviceGammaRamp ChoosePixelFormat DescribePixelFormat SetPixelFormat SwapBuffers DeleteObject CreateDCW

advapi32

OpenProcessToken GetTokenInformation

shell32

DragFinish DragQueryPoint DragQueryFileW ShellExecuteA DragAcceptFiles

msvcp140

?_Throw_Cpp_error@std@@YAXH@Z _Query_perf_frequency ?_Throw_C_error@std@@YAXH@Z ?_Random_device@std@@YAIXZ _Thrd_detach _Query_perf_counter _Cnd_do_broadcast_at_thread_exit ?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmReleaseContext ImmGetContext ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __std_exception_destroy __std_exception_copy __std_terminate strstr memset memcpy memmove memcmp memchr __current_exception_context __C_specific_handler _CxxThrowException

api-ms-win-crt-stdio-l1-1-0

fflush __p__commode _set_fmode fclose fwrite __stdio_common_vsprintf __stdio_common_vsscanf _wfopen fseek __acrt_iob_func ftell fread

api-ms-win-crt-heap-l1-1-0

calloc _callnewh free _set_new_mode malloc realloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _seh_filter_exe _set_app_type _initialize_onexit_table _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _configure_narrow_argv terminate _invalid_parameter_noinfo_noreturn _beginthreadex

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy strncmp strcpy_s strspn strcmp strcspn

api-ms-win-crt-convert-l1-1-0

atof strtoul

api-ms-win-crt-math-l1-1-0

sinf atan2f ceilf powf cosf floorf fmodf sqrtf pow __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale