General

  • Target

    c68baf047f02a312978305f428b2d6fc

  • Size

    69KB

  • MD5

    c68baf047f02a312978305f428b2d6fc

  • SHA1

    ba873361b942c6984a4a2594a0b244b254267cf0

  • SHA256

    79ad31ae7d254f29d56038e650e76cd3e7a9757d99107028f6b1e244ca72b1bd

  • SHA512

    22c84874acf5e2ba00d19d87444f6bcc8db5730733265c6cc0aacbd968b04fd590ef3a0454ec7d2d2da64a5b00fa9eb0f4a27e4cdd0c2411583f92b4d6299b3b

  • SSDEEP

    1536:pDlDl0FrJc9vyf8NS1OtoBzbw9W5dkByEv1vb:pVl0FrJivE8NSSAA9kdkByu1v

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c68baf047f02a312978305f428b2d6fc
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 00000000
  • 11111111
  • 44444444
  • 55555555
  • 66666666