2bfcbd28cbf00c4f6bc3f9431f9bf5e1248d1e784b12f95f41dfbf59b2e4e6a4
- IMPHASH 4847c8aea5b26a115e9f4b1fffee02d5
- SHA256 2bfcbd28cbf00c4f6bc3f9431f9bf5e1248d1e784b12f95f41dfbf59b2e4e6a4
-
Gh0st RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=4, id=12, version=7291,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=4, version=9782,
count=1, productName=Unmarked objects (old),
count=125, id=1, productName=Unmarked objects,
count=19, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,