Behavioral task
behavioral1
Sample
0eb11ad7659e94901dc87afbc4a20950_JaffaCakes118.exe
Resource
win7-20240611-en
12 signatures
150 seconds
General
-
Target
0eb11ad7659e94901dc87afbc4a20950_JaffaCakes118
-
Size
206KB
-
MD5
0eb11ad7659e94901dc87afbc4a20950
-
SHA1
c1f96a67976ffb67d20177a4131d3f9a5ae12e35
-
SHA256
d5e606609482bd50d61b4884200a9a15cdf220f70aea48d66af901fe7e6c8cd3
-
SHA512
39ced16633403eba8b529e92290d6e6c535d28627f5800a6b610b4f0500d5a14b4e54951fe258bbd7050154269f48fad3e50e406a75d54fce8ce662f0d6b847b
-
SSDEEP
6144:lsIt6nWEQgBTyPRqyhYPbOcTBlhHrNndnk/0y:69WEQJq8YPbOcT3Ql
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb11ad7659e94901dc87afbc4a20950_JaffaCakes118
Files
-
0eb11ad7659e94901dc87afbc4a20950_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 22KB - Virtual size:
Size: 208KB - Virtual size: 4B