gcloud-crc32c.zip
- SHA256 38b62b15a059e46361c78359dbc0fa62f91595bb9e778d13439d202982b95ef7
Password
virus
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gcloud-crc32c.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
30 seconds
Behavioral task
behavioral2
Sample
gcloud-crc32c.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
30 seconds
Behavioral task
behavioral3
Sample
gcloud-crc32c.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
30 seconds
Behavioral task
behavioral4
Sample
gcloud-crc32c.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
30 seconds
General
- Target gcloud-crc32c.zip
- Size 1.5MB
- Sample260916-ll84jaybrb
- SHA256 38b62b15a059e46361c78359dbc0fa62f91595bb9e778d13439d202982b95ef7
- MD5 2bb3c51f2fb14c28e96b69253bd65624
- SHA1 1775983d609530a3a97ef0604218e9409c8c9867
- SHA512 fb79ffe6e87e57b255b4c0a42725c4ffa608aaa9ce591de14ebdd09ce0c009c47bb1d11976809cf0abdf7b95f090280d7646b34da4a0d5b11d457070d8c27179
- SSDEEP 49152:LZeUHw4CieW0NN0Y9qfegTkBteX1YBT2MA:LZLHwL3WQ05ZoBtMMTC
- TLSH T139753322037A5AE0DE40EC6D9C5D4D61A3F6326FEEC6E74B247CC848E0E9D45937D894
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/gcloud-crc32c.exe
File Explorer
-
gcloud-crc32c.zip.zip 1.5MB
-
gcloud-crc32c.exe.exe 2.6MB
gcloud-crc32c.exe
- IMPHASH 9b763104e1c7e7b7334a1e9ed4235cd3
- SHA256 6ac2511d3defa6194c04a8d37cbbbbfef8e22c5bd52cbba519717deffae4d195
- MD5 af2db90838ebeb7181481cc0e960e81f
- SHA1 0fe18864ed4badcde7e15394913dd88130f0ac4a
- SHA512 35e550644d13aee0dadff25afdfa72a28acf1a6c6f9354b10f9e506ebfe28360d2062a256e9ae28548a4708d4c583a480dcbbfa7bda5d2c2fb9e0370df11da8f
- SSDEEP 49152:WTDVwIUQ1IH7zKlL0cmy/X6kGMNSBlbJDvsa:WT2p08mGMNklbJDE
- TLSH T16CD57C1BBCE009E9C0AA533689B652927B75BC490F3223DB2E5076783FB2BD45C75714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
virus
Minor OS version
1
Major OS version
6
Entry point
520768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
755KB
Virtual Size
755KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
989KB
Virtual Size
988KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
55KB
Virtual Size
351KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
177KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
314KB
Virtual Size
314KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
133KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ