Static task
static1
General
-
Target
BypassGosth.exe
-
Size
2.9MB
-
MD5
9dba6f5b8c215f39f62f9d944fa233c8
-
SHA1
aaf1fc182f62a5a9ab388c2a5c52a630d8eb5805
-
SHA256
e3253f79d28d7246272eebc9097c3d815b6d9107901afde98fa1ac56c6a36726
-
SHA512
c9e4b8ad499794eb44ce5fdb49d0c01d27d6c602d5cf1feb43c7a465259bc1bf254d68a131de61d733539c052a7ec2e2ef03ad110aeae8599cfa82ad0d763f6c
-
SSDEEP
49152:dTz1CsdUopHvzGrqEXfr6TNeET0VbDupmigPrE+PmIV1bA+Wu36BogYwM:NooFvzIeT0TQmlo+PfVi+W3KbwM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BypassGosth.exe
Files
-
BypassGosth.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.KpqG Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.null Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ