General

  • Target

    9edd0f7c7b63ad8b06e76d577cac71f6_JaffaCakes118

  • Size

    838KB

  • MD5

    9edd0f7c7b63ad8b06e76d577cac71f6

  • SHA1

    598c141d36be2079de2b6400312c1fbab7a4f016

  • SHA256

    337b2a2898f89d83eb9810385b6113b722dc71c9e7192876116ae9cf66797d22

  • SHA512

    bf3ab38c6a78507438e8ef26e793fd3bbc2482a865d6d03181f5a884e9351607c89d1af84ecdee1b3910f73f66ebeaf62289a213e55954d9b2b6ea5254184a39

  • SSDEEP

    24576:wlxVBLnjH2ghBSV6V2/QYOc4/5oETPq7vx:wll72vKT/5tTCrx

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9edd0f7c7b63ad8b06e76d577cac71f6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections