Static task
static1
General
-
Target
ghost.exe
-
Size
76KB
-
MD5
1344d722d68aa84889ab4f708d9d46de
-
SHA1
07f2bbb33bb8c1ce72ca19adbbd8de2b1bdedde6
-
SHA256
6d76a4e8fe2a448c214eddf1120a85edfa45ea24a99f9d72b0f7800379e38e45
-
SHA512
70d30bc37bccfa563ce373f8887fa0ba01c8530f6f58354d07c5c0d65825a5c03a3b33238f9256c6e02810c3861fe92b5c237c93f3c8f24ebd0463bc1334b812
-
SSDEEP
1536:Iov8KAfHKom0T722rFxAhFbzFHFzwY2b6zhixWWLsZWK3hH/lP:DteqovTaqFChFblFds2i+ZPJ/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ghost.exe
Files
-
ghost.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE