ghost[.]STOP | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ghost.STOP
Size

9KB
MD5

cf1c2f16adf7d43aec7bf6f378b627cd
SHA1

c1f577c9736dc84abd998a8a7c0ccace26f98f36
SHA256

f37277a31e9b28992ce781a2da7d6b9de3b93b07dd018ed618dde4a1e24e0e44
SHA512

0458dae41f57cf1879411ca080a4de8da87e549a2843538e5c22c843d7befba3b9ace7aa63601d37c5cfb68b61a6e1fdd9c0549bbf1bc8db74bfc416dacc9c36
SSDEEP

192:iJGc1Zl2+VAfNxl1THs6xgzgVGjPlRDnQAlKhFo2A6Z0aM:iJGcMJxDTHfRmh6jM

Score

1^/10

Malware Config

Signatures

Files

ghost.STOP
.exe windows x86

f9ade0aa18f660a34a4fa23392e21838

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ