Static task
static1
Behavioral task
behavioral1
Sample
iGhost.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
iGhost.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
再不会中毒的超强浏览器!.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
再不会中毒的超强浏览器!.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
请访问我们的网站!.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
请访问我们的网站!.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
进入官方主页.url
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
进入官方主页.url
Resource
win10v2004-20220812-en
General
-
Target
3d56518a4c6eb02066cf83c1671332cb3c0a0cafab19432bd2b2c5aecb5cd063
-
Size
2.9MB
-
MD5
275e4ce590786332fb85251c8a1a7333
-
SHA1
8190ad5702a7f68374f036096886b86a125e6134
-
SHA256
3d56518a4c6eb02066cf83c1671332cb3c0a0cafab19432bd2b2c5aecb5cd063
-
SHA512
ea4f955109027dc71b41de483a0f032e26b83f8afce988bf60938abf81686228515c98ec219b436a045f444a4e7f6504bcdbe27495f62d3e3aa9e56ebb65cecf
-
SSDEEP
49152:xY69V1vT2ppGJXfjwwOJ/l4bgc2lvi+Ge9U9CujEiNfqQXefFUoIoM9S4i/rqK+X:x9T2ppWZslDpCe9juY4fqQudUoIFgb+X
Malware Config
Signatures
Files
-
3d56518a4c6eb02066cf83c1671332cb3c0a0cafab19432bd2b2c5aecb5cd063.rar
-
iGhost.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 50KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载使用说明.txt
-
再不会中毒的超强浏览器!.url.url
-
请访问我们的网站!.url.url
-
进入官方主页.url.url