General

  • Target

    15aa29f9c9d734861f080553ab094776_JaffaCakes118

  • Size

    189KB

  • MD5

    15aa29f9c9d734861f080553ab094776

  • SHA1

    999a346c91941ab07b9ee785270fbe3cf555426b

  • SHA256

    3bf8a294b5d2becd9084f9efc950d3fe6f53380b5d824bc89b7b98991d836876

  • SHA512

    a837febe28f4eeb0ed7dd82b4fd97ae56d6f9bab59c69f421ceef2a506cd9389535318ed364b5e8be1b328c7182b79412f9951aa5f9b0baf98ab461a160824f6

  • SSDEEP

    3072:Z7XcYy5nWs5QHfBPSfxyOmPD8IW4+Pqbs0YPx5zcTBfthHr5QnFPnZHeXdd:BsYy5nW8QHfBGyPWbyFYPbzcTBlhHrOW

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15aa29f9c9d734861f080553ab094776_JaffaCakes118
    .exe windows:0 windows x86 arch:x86


    Headers

    Sections