General

  • Target

    0a2c98403c9e31c28ff53d3ec2e9eedf_JaffaCakes118

  • Size

    60KB

  • MD5

    0a2c98403c9e31c28ff53d3ec2e9eedf

  • SHA1

    26fa92bfe736c42279200b269376c5f374779fcb

  • SHA256

    8df871e6c9f0fde84db471fbda10e1710ea13d8290789a04d42510acb7e524ee

  • SHA512

    77b308864c3916a4eecceaff634e76137c459c37394d60cb6b2d7d0879accd7a80b36212900cfe7cacc6fd1e55ee73fbbb87fdb22c1eea3cc08e6cde5c8a33de

  • SSDEEP

    1536:46mOmkbuSFMntIYFa+OARs2eHXhkewE2Sf3QwF:4jOmwOtDFa+566Ktf3F

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a2c98403c9e31c28ff53d3ec2e9eedf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections