Overview

overview

10

Static

static

10

186b181e40...18.exe

windows7-x64

10

186b181e40...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    186b181e408ed877adc9080c035267a3_JaffaCakes118

  • Size

    61KB

  • MD5

    186b181e408ed877adc9080c035267a3

  • SHA1

    c4e981831a146d3e7266b8cc09d58a61b9abeba0

  • SHA256

    bb95ed700c0350a1fe7ed6a25259f1c651d1fbd5c6f0d29a0ea0c675e446dc77

  • SHA512

    a3f7acdaf41e1d9b4c715dbe692f74dfc7602c623ce6de205a9a9f499a59e5985dcd387ad1912891d63a0c429883c4b70a0283fd2a9b387278dfa07646515a55

  • SSDEEP

    1536:oOoG7/rNbdrLZv5huWUimcSAnQoAJhb0+7SyY/f+mkgMF:FoGHnn7gcdnQzb0d/mmkgs

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 186b181e408ed877adc9080c035267a3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections