Behavioral task
behavioral1
Sample
cc396face1b8e9367aee1a6d0c508ae8.exe
Resource
win7-20240221-en
4 signatures
150 seconds
General
-
Target
cc396face1b8e9367aee1a6d0c508ae8
-
Size
107KB
-
MD5
cc396face1b8e9367aee1a6d0c508ae8
-
SHA1
266b3f71ad6a8b84269048716950c08f7b2894b2
-
SHA256
8426864b20ff3332bfa77f0baad16e19fb19fab31e84f7f9cb0375aebec7faf5
-
SHA512
36cf6f7572c7094a496dc28f1e7039764974fb6686b42b61764febcf48613ab7f8e57c58e40701a8c80cfced4e3900a0791a98d7a2f88203ec8e33b2fdcfb07a
-
SSDEEP
3072:k87SyGUmfY0+XHBkHDgHcgKb+TweGgbCdh:p7SyGVfP+XyUHhqaweGd
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc396face1b8e9367aee1a6d0c508ae8
Files
-
cc396face1b8e9367aee1a6d0c508ae8.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size:
Size: 116KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA