Behavioral task
behavioral1
Sample
22bae3414acfdc73f23731c615eb5e8e.exe
Resource
win7-20231215-en
12 signatures
150 seconds
General
-
Target
22bae3414acfdc73f23731c615eb5e8e
-
Size
198KB
-
MD5
22bae3414acfdc73f23731c615eb5e8e
-
SHA1
7325baa222b45bff7f0cd1c8d3f92d7a06d56866
-
SHA256
a8b544ee405b6940b4d011f634629afd1dc5374f92417ef07a002f1886e41956
-
SHA512
e3f9ee04380ddf60dcf0c2a7e4100fadd3f0a2731486d304689c7098ac4279e2b8c0fa710df739ccc740affe034a86b32c74e9ec50f703a347378da58fd9a3ce
-
SSDEEP
6144:ws4C6nW8QzBTyFZqyhYPbOcTBlhHrtndnkW07:FQW85jq8YPbOcT3Fw
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22bae3414acfdc73f23731c615eb5e8e
Files
-
22bae3414acfdc73f23731c615eb5e8e.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size:
Size: 200KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: - Virtual size: 196KB