Overview

overview

10

Static

static

10

eaa01c848d...18.exe

windows7-x64

10

eaa01c848d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eaa01c848debb5582b5863750b4ec64d_JaffaCakes118

  • Size

    158KB

  • MD5

    eaa01c848debb5582b5863750b4ec64d

  • SHA1

    f40f57afdabb95ad417e65320f5519da3406875f

  • SHA256

    798a4cf414b37da0fa85cdb51b562aa46fa6a6b6af457741f7175e371bacf622

  • SHA512

    560c97cb9c6629d8eb3588569de620ac1f345520853213a0239766a8d5b0806bdacded7a2af3f6f906b7636ebb111f3f9f9a3f4dde86998e9410b725ec73dffd

  • SSDEEP

    3072:foUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHsT:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJH8

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eaa01c848debb5582b5863750b4ec64d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections