Overview

overview

10

Static

static

10

011e7c94d1...18.exe

windows7-x64

3

011e7c94d1...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    011e7c94d100cc31b1f014cfa658c913_JaffaCakes118

  • Size

    176KB

  • MD5

    011e7c94d100cc31b1f014cfa658c913

  • SHA1

    45eaf233c90dd8b24b34ff04093d10ce28bf6876

  • SHA256

    961ceb15df861a2cfd5e9003c30ac48685a2d9c9c452bb0730e98de8f4d0da07

  • SHA512

    3439ad9daf86d0b85816c3dd885fedc648c80f3229ced0940c5609f799cab516364c7e2e0909aa98c4cd22a914ec65d181b92341bcc5eeedc5a0a5ee22efb2dc

  • SSDEEP

    3072:hhsPeqov90B74uFK0dkXR9NK/+EvY7EZK3oZM7kO/re7RAJl:nEeqob0dMR9cbv6WK4ZMB0

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 011e7c94d100cc31b1f014cfa658c913_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    52896788833e844b0e23d3de7305e0a9


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/108.bmp
  • .rsrc/CPP/102
  • .rsrc/CURSOR/10
  • .rsrc/DIALOG/106
  • .rsrc/GROUP_CURSOR/111
  • .rsrc/GROUP_ICON/105
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/ICON/6.ico
  • .rsrc/ICON/7.ico
  • .rsrc/ICON/8.ico
  • .rsrc/ICON/9.ico
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/107
  • .rsrc/string.txt
  • .rsrc/version.txt
  • .text