gotld_0.0.1_windows_386.zip
- SHA256 9d1969424613a410bade68a13601dd91ab52f1c9a704a1c085932490ed0e93fc
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gotld_0.0.1_windows_386.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
gotld_0.0.1_windows_386.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target gotld_0.0.1_windows_386.zip
- Size 3.7MB
- Sample261104-wege2sttay
- SHA256 9d1969424613a410bade68a13601dd91ab52f1c9a704a1c085932490ed0e93fc
- MD5 a7a715e510bb54bf0bfc0cb5e936c79e
- SHA1 6dda6cbd170a04471591e350409efdbf889c6eee
- SHA512 75e2e69f0c2b90f5546f8a77ed5a33a6d00486d583778d8fa254ef1ff7857fb90a83cc7847f2f7d2315473ccfdaec885f689f5deda17d3308e5a46ab9f81f833
- SSDEEP 98304:ZNzM4zgV2W8vm1Uqk7TETu2iC38cTbdYvPkd5E1d4O:fHzHWVUqD62nNEPZff
- TLSH T1790633AB5191C958217465E6FD1D02FE283DCE8C7CB5C0C1511A8CFE5EE09AB973ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/gotld_0.0.1_windows_386.exe
File Explorer
-
gotld_0.0.1_windows_386.zip.zip 3.7MB
-
gotld_0.0.1_windows_386.exe.exe 6.4MB
gotld_0.0.1_windows_386.exe
- IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
- SHA256 b4cf730b4afa5133969e1a5151cec6e2b008fbfcc4f86c8f4527a49e884b17ed
- MD5 d992b07236686af209262f42fe8e2e7e
- SHA1 e359256ed30274c2b41879f52f37f755613798d3
- SHA512 a7afa5ab47cf941575053455b1fbb399fe036c410cd2ff7af7545dfcd57ffe01e0e1afd4bfe7ff0b8cacfa16842656518994b00b1b13739a31e7611c5fe14b96
- SSDEEP 98304:/jtwBoohw7ozGhpqfEb5yKZm1p5pTUf3JVofvXV/4YdAL:rt0EAKZmjYfPofl4YdA
- TLSH T1C8668C40F9DB94B5EA4216700477A2BF6330BD094B24EBC7DA147F6BE877AD10E32649
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
407344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
210KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
512B
Virtual Size
295B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
392KB
Virtual Size
391KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
42B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
625KB
Virtual Size
625KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
572KB
Virtual Size
572KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
293KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ