General

  • Target

    2463996b1de747ac9321d4e4a79d03ef_JaffaCakes118

  • Size

    204KB

  • MD5

    2463996b1de747ac9321d4e4a79d03ef

  • SHA1

    eeee1f7862a0b17ef64ad084c6edceb8d3d360af

  • SHA256

    74bf0537d435c1f45ca771661e008a344fab98a69ed7350a97c4cb3f44bdf41e

  • SHA512

    0956c2c6942a6edd893cf2d24b2ba662806d9f157d6683d98d4b26af78c594728d7237a253051a72e9013828dea32a117401865d2c084fbe676c7f2c844ac932

  • SSDEEP

    6144:kGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7hL:Xt0VPFfsKAkrbPl7hL

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2463996b1de747ac9321d4e4a79d03ef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections