General

  • Target

    2320d19f01729a410ab993f872c936e5_JaffaCakes118

  • Size

    185KB

  • MD5

    2320d19f01729a410ab993f872c936e5

  • SHA1

    410ffb447677989178c96a2defca5b79dfcdd152

  • SHA256

    3ca43ecd30bd67d6c5a8e2be367d0251d583d4b6a1518a852139894c8a33efa2

  • SHA512

    a3a368eed00bc32e4a628e85676ade8ded98c61e18bc7ac0eb7b14131f9d863c754234108c568543664093d66e081f01f29e74ae454b185e6ca716a6f7b1a2ca

  • SSDEEP

    3072:foUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHUsuL:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJH2

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2320d19f01729a410ab993f872c936e5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections