gdreqbot-1[.]2[.]2[.]Setup[.]exe

General

Target
gdreqbot-1.2.2.Setup.exe
Size 139.1MB
Sample260808-teekcazepe
SHA256 cd4b79362fd648e4507bed028f9f2d4c84c67fa398bbb8f51cbf41222286fc78
MD5 267b828de2c3e28f7b249fc1a7d29373
SHA1 8a192dcb7df9700de9be0e7312bd49179949610f
SHA512 362e5d4508473e2091022e3167cda125f8e6cb3f9ad005137f30dca9a697b1599de8cba141949de4237974f7b6bd5244cf3920424c09f54647803e628851c530
SSDEEP 3145728:KC3EbhTCLhFcnQF/tz1RTrK09m8EQxGOminOq0pDXQso:KC3EbhmL8n8z1VV9my0wOz
TLSH
T1EB6833F5A0506634D376FD338A93C7B0B12F5567CEB6CC5A8D580B62061F8AAC91B31B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gdreqbot-1.2.2.Setup.exe

File Explorer

gdreqbot-1.2.2.Setup.exe

.exe 139.1MB

gdreqbot-1.2.2.Setup.exe

IMPHASH e6f4169f2a5c3a8f93171d9f593bd22a
SHA256 cd4b79362fd648e4507bed028f9f2d4c84c67fa398bbb8f51cbf41222286fc78
MD5 267b828de2c3e28f7b249fc1a7d29373
SHA1 8a192dcb7df9700de9be0e7312bd49179949610f
SHA512 362e5d4508473e2091022e3167cda125f8e6cb3f9ad005137f30dca9a697b1599de8cba141949de4237974f7b6bd5244cf3920424c09f54647803e628851c530
SSDEEP 3145728:KC3EbhTCLhFcnQF/tz1RTrK09m8EQxGOminOq0pDXQso:KC3EbhmL8n8z1VV9my0wOz
TLSH
T1EB6833F5A0506634D376FD338A93C7B0B12F5567CEB6CC5A8D580B62061F8AAC91B31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

kernel32

LoadResource FindResourceW lstrlenW GetProcAddress GetModuleHandleW DeleteCriticalSection GetTempPathW GetLastError GetTempFileNameW MoveFileW WaitForSingleObject GetExitCodeProcess CloseHandle DeleteFileW GetModuleFileNameW GetCurrentProcess LoadLibraryW FreeLibrary InitializeCriticalSectionEx GetFileAttributesW CreateFileW SetFilePointer ReadFile VerSetConditionMask GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FreeResource SizeofResource LockResource CreateProcessW GetSystemDirectoryW SetDefaultDllDirectories GetCurrentThreadId DecodePointer RaiseException LeaveCriticalSection EnterCriticalSection lstrcmpiW LoadLibraryExW GetConsoleMode GetConsoleCP SystemTimeToFileTime VerifyVersionInfoW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle HeapFree HeapAlloc GetFileType CompareStringW LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Sharing