Overview

overview

10

Static

static

10

20db63fd38...18.dll

windows7-x64

10

20db63fd38...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20db63fd38a0957a195e1a92ac3bfc9e_JaffaCakes118

  • Size

    68KB

  • MD5

    20db63fd38a0957a195e1a92ac3bfc9e

  • SHA1

    6f2b3279ae0ec21269cc793d903f7b329383c046

  • SHA256

    0f9e6f9a0905e8345f46d956f5143bbd804d140e32b8ae694132b47f1c9b3dd0

  • SHA512

    7dedc15463441eda36a65b26823595ac9e112f72b2c5b81ff3d464ff8f20835a24fa5b2c115e0496972288d53d8bcd9eb7443bce23b8e657787cac53064f17ae

  • SSDEEP

    1536:5FUYalDF1LpwcWvSf8NS3At/BzbCgBBWByIvXMav:55uF1LpwRvk8NS+ZygBBWByKXM

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20db63fd38a0957a195e1a92ac3bfc9e_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 00000000
  • 11111111
  • 66666666
  • 99999999