GarrycatTool[.]exe

General

Target
GarrycatTool.exe
Size 343KB
Sample260930-m84b8sdf98
SHA256 66a68d35576a039df8ad8255746d70c744886f9d79d32eff075ae6be75f5535c
MD5 8129b6551660a1a3f5e9d36d12fb04c2
SHA1 8c9e6241f9c212fe0e4814bd94c280c498c9fca1
SHA512 79650fefdb3a3a7456d526f758dfbc0d7e3bdbe8ff5dfc52a8c5a2dc35e7a64d3d015ab6a32294388b4955c9e0a2e33ce2e56bc6f87c5491d99abcf5c2aea148
SSDEEP 6144:vTNMb+Iuzd2cyJE1nDTGjX8jlVSCg+8Dh1J83tvBHGUNbawlJqwbG:viboxmosglVH8Dh1WdvBGCba
TLSH
T12E749E59FBA414F9E267C17CC9534906DB727C4A07709BCF23A44A962F236E09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GarrycatTool.exe

File Explorer

GarrycatTool.exe

.exe 343KB

GarrycatTool.exe

IMPHASH 31fbda7c2f9af9125cd16ba2bb64e66d
SHA256 66a68d35576a039df8ad8255746d70c744886f9d79d32eff075ae6be75f5535c
MD5 8129b6551660a1a3f5e9d36d12fb04c2
SHA1 8c9e6241f9c212fe0e4814bd94c280c498c9fca1
SHA512 79650fefdb3a3a7456d526f758dfbc0d7e3bdbe8ff5dfc52a8c5a2dc35e7a64d3d015ab6a32294388b4955c9e0a2e33ce2e56bc6f87c5491d99abcf5c2aea148
SSDEEP 6144:vTNMb+Iuzd2cyJE1nDTGjX8jlVSCg+8Dh1J83tvBHGUNbawlJqwbG:viboxmosglVH8Dh1WdvBGCba
TLSH
T12E749E59FBA414F9E267C17CC9534906DB727C4A07709BCF23A44A962F236E09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

84896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\chich\source\repos\Mrbeast\x64\Release\Mrbeast.pdb

libcurl

curl_easy_cleanup curl_easy_strerror curl_easy_perform curl_global_cleanup curl_global_init curl_easy_setopt curl_easy_init

kernel32

RaiseException SetEndOfFile WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW LocalFree FormatMessageA GetLocaleInfoEx GetCurrentDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW CreateFile2 AreFileApisANSI CloseHandle GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RtlUnwind SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree CreateFileW GetDriveTypeW GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapReAlloc SetStdHandle ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP GetTimeZoneInformation

Name

.text

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

GarrycatTool.exe

libcurl

kernel32

generic