c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
- IMPHASH 17934126e1b968a66c8bb9995517aa55
- SHA256 c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
-
Gh0st RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=4, id=12, version=7291,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=4, version=9782,
count=1, productName=Unmarked objects (old),
count=122, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,