GhostCosmeticsFree-Visenya[.]exe

Resubmissions

29/05/2023, 22:38

230529-2kkmjsec2t3

29/05/2023, 22:33

230529-2gxgyaeb913

Sharing

Copy URL Twitter E-mail

General

Target
GhostCosmeticsFree-Visenya.exe
Size 8.0MB
Sample230529-2kkmjsec2t
SHA256 80b2cdf1cb0b71fb27e7b1f5ec8d473a31d78a9435992916561fd9a4107e6f75
MD5 b6b4439ca3a6c718351e701ceeb7360b
SHA1 c46b3650a54945173a5ade4869f8f5fea5f106d1
SHA512 5f4c91f5fa24b6630541be6d247c25b9e7f23c6906fdd023b5e1c237de4307ae7d9d9a784776938f0ebb3b73660ccdddb40920e36cbcb84647be2ccbd7e6de65
SSDEEP 98304:I2R0VKlmiK4K0nHP76ceVLB8jzRkpDOg4pFfulW48VRcELEv5wrADNmbA/JMvdgv:FMKjKKnvUC90OgjlWfchBhAdgjls4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GhostCosmeticsFree-Visenya.exe

File Explorer

GhostCosmeticsFree-Visenya.exe

.exe 8.0MB

GhostCosmeticsFree-Visenya.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 80b2cdf1cb0b71fb27e7b1f5ec8d473a31d78a9435992916561fd9a4107e6f75
MD5 b6b4439ca3a6c718351e701ceeb7360b
SHA1 c46b3650a54945173a5ade4869f8f5fea5f106d1
SHA512 5f4c91f5fa24b6630541be6d247c25b9e7f23c6906fdd023b5e1c237de4307ae7d9d9a784776938f0ebb3b73660ccdddb40920e36cbcb84647be2ccbd7e6de65
SSDEEP 98304:I2R0VKlmiK4K0nHP76ceVLB8jzRkpDOg4pFfulW48VRcELEv5wrADNmbA/JMvdgv:FMKjKKnvUC90OgjlWfchBhAdgjls4
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8173550

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths