General

  • Target

    ghost32-12.exe

  • Size

    1.5MB

  • MD5

    ed0991d6909a951f66e204e73b690e70

  • SHA1

    b6c6ecd4059843781a4c49b6729b1506927e2ff5

  • SHA256

    535b64e0aaba6e53d7ffa6a299cfcb8722f6431d7b34d52728a58c23628c1503

  • SHA512

    cfcc4c4665bd4decb0f78bf6fcc2925f3706efcdb6d21455bea2ff16e06f840709a23f7786f592d29cfaba36e9aaa0c89cd20c8dd3145ae1d0fba7ded1c0b08a

  • SSDEEP

    49152:Sh44nPaEueW5tqFGv32HUJ+jz5Eddt/ZOsJOc3fnQeAMtBTy:4BnPaEnWaof2nH5EdH/ou5QeAWY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ghost32-12.exe
    .exe windows x86


    Headers

    Sections