50f8f8dfc0b30b0ae35a9c1ddfdf883a9eec2fa3041bd18fd8d362819a449b95
- IMPHASH 4847c8aea5b26a115e9f4b1fffee02d5
- SHA256 50f8f8dfc0b30b0ae35a9c1ddfdf883a9eec2fa3041bd18fd8d362819a449b95
-
Gh0st RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=4, id=12, version=7291,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=4, version=9782,
count=1, productName=Unmarked objects (old),
count=125, id=1, productName=Unmarked objects,
count=19, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,