Overview

overview

10

Static

static

10

225a854896...18.exe

windows7-x64

10

225a854896...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    225a854896247d308e3a1704dd38a3d2_JaffaCakes118

  • Size

    316KB

  • MD5

    225a854896247d308e3a1704dd38a3d2

  • SHA1

    1c1026fdf431b3598a889d46b5b388ef0797a865

  • SHA256

    17c30677b26ea4ba80e16fd0f81259f7943222507ac3463ff97eb0322e497d41

  • SHA512

    454595bf9400b908dffbbbda5171daffd5c0a08f0876b622600af9d57585adf7ce61431458e02279f8605341d651b3003fa4f7d7c3d08376350b90d71716efdb

  • SSDEEP

    6144:kGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7h0:Xt0VPFfsKAkrbPl7h0

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 225a854896247d308e3a1704dd38a3d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections