General

  • Target

    ghost.exe

  • Size

    120KB

  • MD5

    05f6ab0eed4dafee4745c1a1a8bd8802

  • SHA1

    c59cbe02fcfbaa948fe0bf6e06ee5f942afc32e8

  • SHA256

    f2b966d451c65c8ec3a36ffe1d6025653124385ed240c7ab1bda7c2eeedd85e8

  • SHA512

    2d87a5e2b47332e6d90b207691e1c06b18f81aa95fabd038e3f2a710a4bf356450433156a09c5fa316e73bf2d2128e78780c2a2ddc069ccfe2150da7641dcb68

  • SSDEEP

    3072:P38y0ahqwWK1CmcEcofzFZ44XKSW8fMtGnVJAPe:P31BhqwXCgfzFZ4uKtdtGnPn

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ghost.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections