GhostCosmeticsFree-Visenya[.]exe | Triage

Resubmissions

29/05/2023, 22:38

230529-2kkmjsec2t 3

29/05/2023, 22:33

230529-2gxgyaeb91 3

Sharing

Copy URL Twitter E-mail

General

Target

GhostCosmeticsFree-Visenya.exe
Size

8.0MB
MD5

b6b4439ca3a6c718351e701ceeb7360b
SHA1

c46b3650a54945173a5ade4869f8f5fea5f106d1
SHA256

80b2cdf1cb0b71fb27e7b1f5ec8d473a31d78a9435992916561fd9a4107e6f75
SHA512

5f4c91f5fa24b6630541be6d247c25b9e7f23c6906fdd023b5e1c237de4307ae7d9d9a784776938f0ebb3b73660ccdddb40920e36cbcb84647be2ccbd7e6de65
SSDEEP

98304:I2R0VKlmiK4K0nHP76ceVLB8jzRkpDOg4pFfulW48VRcELEv5wrADNmbA/JMvdgv:FMKjKKnvUC90OgjlWfchBhAdgjls4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GhostCosmeticsFree-Visenya.exe

Files

GhostCosmeticsFree-Visenya.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ