Behavioral task
behavioral1
Sample
d625339ece6759cfc62c2608c38dca9e.exe
Resource
win7-20240221-en
General
-
Target
d625339ece6759cfc62c2608c38dca9e
-
Size
141KB
-
MD5
d625339ece6759cfc62c2608c38dca9e
-
SHA1
d9cdb32d30b1b201a166461ec7cf5088adb900aa
-
SHA256
dfede2d9c005ff58973751ad94b4a75d3236dc5186e8afafdee6edb36c18ee54
-
SHA512
9a7fbc8811659309d85891c82f1e5cbff89f800c1d1226e82330c53dcdf7ad3374af99d579b232cccb4fc92599b140032c8c3c7c480dadae6adec22ef1a6627a
-
SSDEEP
3072:LtwZSQpKa3VGVnRUlCz764/9xpEPBqbZuwm5iGLhTeqovj:LEJVGRxx9bowZuwm4Gleqo
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d625339ece6759cfc62c2608c38dca9e
Files
-
d625339ece6759cfc62c2608c38dca9e.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 139KB
Size: 156KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: - Virtual size: