General

  • Target

    26b2a94b677c91a38eda71049674dd62_JaffaCakes118

  • Size

    279KB

  • MD5

    26b2a94b677c91a38eda71049674dd62

  • SHA1

    e7930ca105ec20520c3af66747d251f5101a41bb

  • SHA256

    992325eb9062ada7a401a6c07e6d1bab021d891223e922a4e537fe972fd6ddf8

  • SHA512

    5d5475c37940ea563594e6aea70876846fa6874429ef9fa6e4cccd42ba1ea4ddc0a5428d6504f561ef0c516d722f5d6c96a0ceb2a823f3de5e3a8d6110e563f9

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHYi:Dt0VPFfsKAkrbPlYi

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 26b2a94b677c91a38eda71049674dd62_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections