General

  • Target

    1ade9c478700d293853985754d5c8f89_JaffaCakes118

  • Size

    153KB

  • MD5

    1ade9c478700d293853985754d5c8f89

  • SHA1

    f07c941c12f1430cbfb71eb5347cd2d2bed30a9c

  • SHA256

    74319aa3c9c52db235ed20a569def6d5437ae58578cfc53b3fbd5a737394ee49

  • SHA512

    bb8bedc4f873043def86e48bcf65571d2cfe0fafbed7b21e7a3a700b9baf8e15e8320ea780f914c8d5b9e9bf2b2fbb0b1d9d9bf8e75d71876ac68e35d93bafb9

  • SSDEEP

    3072:9/r3endTMB099fWYeZsRfn3nVKVTBftPj47kJ/M:5rOdIiT88/8VTBlPBM

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ade9c478700d293853985754d5c8f89_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    204b9f7a15f434afc6ed4fe5c5628116


    Headers

    Imports

    Exports

    Sections