Overview

overview

10

Static

static

10

0d3297ddfe...18.exe

windows7-x64

10

0d3297ddfe...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d3297ddfe15079a0d116690afdf9c55_JaffaCakes118

  • Size

    39KB

  • MD5

    0d3297ddfe15079a0d116690afdf9c55

  • SHA1

    f266915f0c62327d645037b5d4649e1666cbf027

  • SHA256

    d24dc829b3f045b302ce7e6f04d0f71fb2bc82680b4819c92965a648c4cfc551

  • SHA512

    f901c1f286adcb14a1d20b36bd3f33dd4abe328ff536e91e0443dc9ed227024dc6439f21a20a420021586e2254488cf823ca337d245176628899a83b2517004f

  • SSDEEP

    768:sJue1m2C5UZitgYBZxlRo+bAsbHkQ25dK4OamC4QQmU:sce1m2CbgWZxfo+sWEQidHPpAf

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d3297ddfe15079a0d116690afdf9c55_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections