Overview

overview

10

Static

static

10

fcfa69cbc6...18.dll

windows7-x64

10

fcfa69cbc6...18.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

CERTIFICATE.dll

windows7-x64

10

CERTIFICATE.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcfa69cbc689304e055d5705ed7692a1_JaffaCakes118

  • Size

    101KB

  • MD5

    fcfa69cbc689304e055d5705ed7692a1

  • SHA1

    983815092026b81b125e85e02c6e019ef6349ecc

  • SHA256

    4ee20558b9da83776f563619de8002838d49b21412f40ff74391292c411a83a9

  • SHA512

    51c0b2eb5bc1da32b3aa0b310df6d4f08e6a3e8b3f195ead6a9dc3011042a0c92f05c5163e99084488228ed05ca4f62f51b658f591269a42682be1c6ad6af33e

  • SSDEEP

    3072:rwZ2QNI3VGVilUVjz764/9xjEEUQqbZuwI5RG:VVGg2x9tjUpZuwIrG

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 10 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • fcfa69cbc689304e055d5705ed7692a1_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .rsrc_1
  • .text
  • CERTIFICATE
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections