Behavioral task
behavioral1
Sample
3645-onekey-ghost_setup.exe
Resource
win7-20240704-en
General
-
Target
3645-onekey-ghost_setup.exe
-
Size
3.8MB
-
MD5
a64e374945845aaec6ad063e8be450db
-
SHA1
765c30dcfe127cb9c7c246ffa5ebb35040e1ee82
-
SHA256
46d0413084564b4de78218ab73cac481743d6c5756b13fd4ffec7c897b8f75d8
-
SHA512
81afed327679b6e228e06dacba68b5a429ef8255d27158d950d6eae9b2127dee443a849a66fadbdf2f5b5ec6bd4d5a38884aba4812370236615ba1cae2e1ef19
-
SSDEEP
98304:HkpOWMJrMHGo5Bp+6IOYMCT2oOB9sQJ7OW24JRTlnm:EPMJ4Hj+IYMK2zB9tJ712yRM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3645-onekey-ghost_setup.exe
Files
-
3645-onekey-ghost_setup.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE