Ghost_VPN_Free_setup[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Ghost_VPN_Free_setup.zip
Size

933KB
MD5

1333e94811c5c6684944da819a330524
SHA1

4c248a332eb42ec2628fd559fbd12d5cf3de49c8
SHA256

bc99d1bb9a12367979fcd24b696af85816f730c968f4e99df1c506ca99fa709f
SHA512

4dece5e82fcf0988bd70bf817a4e2e23e390727d2f9881733f16e5c2db7db1dee54282ffa98186fa9c93d42a66a4ce273e9687f90fa74c15f8ecc8195fcf188c
SSDEEP

3072:T6PGPdzLz0VA6AcGkFZSC8K4a6A8d6wXdKVhv4jRdIus:7PhYGbEC9K4aUXtM4ps

Score

1^/10

Malware Config

Signatures

Files

Ghost_VPN_Free_setup.zip
.zip
Ghost_VPN_Free_setup.exe
.exe windows x86

6c3e9c77eb48a74726a14dbd1860421a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
FreeConsole
GetUserDefaultLangID
GetProcessIoCounters
SetHandleCount
CreateEventW
SetSystemTimeAdjustment
CreateFileW
GetFullPathNameW
GetFileInformationByHandle
GetLogicalDrives
lstrcmpW
GetProcessWorkingSetSize
CopyFileW
GetNativeSystemInfo
AssignProcessToJobObject
GetNumaHighestNodeNumber
LockFileEx
ReadConsoleInputW
SetFileShortNameW
GetModuleHandleA
GetProcessTimes
GetProcAddress
RtlUnwind
RaiseException
GetCommandLineA
GetLastError
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

gdi32

SelectObject
CreateFontIndirectA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c3e9c77eb48a74726a14dbd1860421a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 259KB - Virtual size: 261KB

.rsrc Size: 67KB - Virtual size: 67KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 259KB - Virtual size: 261KB

.rsrc
Size: 67KB - Virtual size: 67KB