Static task
static1
Behavioral task
behavioral1
Sample
ghghf.exe
Resource
win7-20231129-en
General
-
Target
ghghf.exe
-
Size
669KB
-
MD5
0c5f0403cdf153d38f73f4e488dd900d
-
SHA1
a02dadab44a285afc9ad75b0c08201fce220c373
-
SHA256
cd6e101765095b8270b5440584b773e83927c83a5ae9ce917a360455f36de1ad
-
SHA512
90fc54906409c14c5b355f67c153a5814c06ed57191475eb26c967ecd5808b15856656aa4e3516026f68c98ba5c16792cb4d57b119a9357599e9bd5eb775a304
-
SSDEEP
12288:yb9gErUWW7cqo8Ow7DknTVQZJpOQ3vhYRQtaVRjE0jWTEdx:avrxIc4Ow7DkpQn3fhx8uzTEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ghghf.exe
Files
-
ghghf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 667KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ