General

  • Target

    226bbbd75e2fde3c82ed6d2f32125b2a_JaffaCakes118

  • Size

    314KB

  • MD5

    226bbbd75e2fde3c82ed6d2f32125b2a

  • SHA1

    685dbfcc06b9eabe2a1083324af4be3e331b2c11

  • SHA256

    a9cb1e9aad8754b88a2eeae5dc1ce94d79a73dc8694e264aedb0d9613aab63f7

  • SHA512

    e6307f4d1dadcb1faed092ae61ee78ee71cdcaaf39d76d4fd640db0435da30fb065edf0d5aae5963cd109b71fe6cd2fad47f32a5205eb9c97be2fae8d4638661

  • SSDEEP

    6144:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJH2F35:Gt0VPFfsKAkrbPl255

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 226bbbd75e2fde3c82ed6d2f32125b2a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections