General

  • Target

    bfa56f59725a2127d3b0f204f7ae417a

  • Size

    7.4MB

  • MD5

    bfa56f59725a2127d3b0f204f7ae417a

  • SHA1

    fd77d294910c136331187d622b90b9dbe82eb42c

  • SHA256

    913159ab2f4f8dd8e4941e342c9cfbce2f96200c6e07d82c457ae7a7c8092185

  • SHA512

    47710f0900076c1d948e5870f6b0bbbce54bf5e656daee3bd32278e1d8c51c879481256500e3c8c0f084331290f4de8171bc67b5aee13ba793b524ee36a7c437

  • SSDEEP

    196608:WOnVTNTo9U/nkUXHRSUMYBk0af0pbV8xwcerkM:WOVTNDrUUMYwMpp8xZerv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfa56f59725a2127d3b0f204f7ae417a
    .rar
  • readme.txt
  • win7_GGhost.CHM
    .chm .ps1 polyglot
  • win7_GGhost.jpg
    .jpg
  • win7_setup_1.6.0228.exe
    .exe windows:4 windows x86 arch:x86

    8f252d622858e6b45e6c847617db8770


    Headers

    Imports

    Sections

  • 新云软件.url
    .url