Static task
static1
Behavioral task
behavioral1
Sample
BrowserGhost.exe
Resource
win7-20231020-en
General
-
Target
BrowserGhost.exe
-
Size
487KB
-
MD5
bfd92dedefe429205a635a38096429a2
-
SHA1
e9d73bb749ad4e3aee0c5889dbcea27824b2bd96
-
SHA256
ce0ae1416a4841144e8a377eed2a11fef988b08042606bac8121b4a4abd5391e
-
SHA512
2a7e2405a9744603c5f188fdc488f60f572c427903b0813a0e87138e1140aca2fc952add25f34eb5d9569bb6915f9a5fa358aa7e6560950e1e63d81d1b9ba505
-
SSDEEP
6144:FkzLzZZx2cG5yMA0c/FNfIQ6NDn9s72DjTqyllHYAB5V46T9NAzya38tZgxUq/6:FkzLzZZx+yMA1gnqWH1RtAzya384qq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BrowserGhost.exe
Files
-
BrowserGhost.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ