Behavioral task
behavioral1
Sample
ce5dc079d2f3ca70b8616da4157df37dc48582acf6df273c9fa12a98e2028319.dll
Resource
win7-20240508-en
General
-
Target
ce5dc079d2f3ca70b8616da4157df37dc48582acf6df273c9fa12a98e2028319.dll
-
Size
14.4MB
-
MD5
50dda13d14250b929da6d55bd8a98e06
-
SHA1
f863b456284f9f2a7581cef7dc89fc5d4ffe5524
-
SHA256
ce5dc079d2f3ca70b8616da4157df37dc48582acf6df273c9fa12a98e2028319
-
SHA512
83f2578ae8a783cdcf2ba7e95e06bb264f321780ee2b78ed202b61e343f0fb4499ad0a15a7eb3eba62a3e30ee661ee5f91ee565d7bd4ea29ba93fc876e28a4fb
-
SSDEEP
24576:yIb3+rvVSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSQSE:Sv
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce5dc079d2f3ca70b8616da4157df37dc48582acf6df273c9fa12a98e2028319.dll
Files
-
ce5dc079d2f3ca70b8616da4157df37dc48582acf6df273c9fa12a98e2028319.dll.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 74KB - Virtual size: 60KB
Size: 140KB - Virtual size: 4B
���� Size: 87KB - Virtual size:
IMAGE_SCN_CNT_CODE
Size: 132KB - Virtual size:
Size: - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA