General

  • Target

    f50da7f32e4ca370f7aaf78755a74948_JaffaCakes118

  • Size

    251KB

  • MD5

    f50da7f32e4ca370f7aaf78755a74948

  • SHA1

    b27cff438fd03e6172e3bab085b78019db2103fa

  • SHA256

    2c27439a623452fa2e02d36b7eb191407289a73f726455fba0a0406f069b0168

  • SHA512

    8d5ce75153fd9f58bf07e1fe18c064151baed37b33f9001aaa9fb95084d01d24615f882aa5bec712bddf55472958626edb05f9ae53779e16e926f1f0aea32b12

  • SSDEEP

    3072:daaIIf5xahjfNfpDhBis1MWVUvwLZkrH9kj8BPOI5s8Dxnj8BPOI5s8DxoWFO2EH:wWHahJJhA+bUvw1kG4G7a4G7vWFO5H

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f50da7f32e4ca370f7aaf78755a74948_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections