Behavioral task
behavioral1
Sample
12d7e0af3f609161606913954a3da42359ecb066d55584bfc82889d43b13bca1.exe
Resource
win7-20221111-en
General
-
Target
12d7e0af3f609161606913954a3da42359ecb066d55584bfc82889d43b13bca1
-
Size
646KB
-
MD5
43cfde84b4bc74bf05760c41ab3efac5
-
SHA1
506cd1a2499e742addafeccf4b4c033601b06628
-
SHA256
12d7e0af3f609161606913954a3da42359ecb066d55584bfc82889d43b13bca1
-
SHA512
164c805b57ee5a4c38ca1d6c75594c1a8edd727369da0564cfbf2564af8ca8925fd0405020bda8e383239da18bb4e9761b41a9322e190f1c7404ee9e1c43c6e4
-
SSDEEP
12288:nANBxI/RJgv0zp8r4OOSaPYyb3KwwZLFfp/9J8xm3gy6ydmVM10UYcGhiQ8g:nwBxIn00z6pzavawgLD9J8WmG10/L38g
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
12d7e0af3f609161606913954a3da42359ecb066d55584bfc82889d43b13bca1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 636KB
Size: 664KB - Virtual size: 4B
���� Size: - Virtual size:
Size: - Virtual size: 651KB
Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA