General

  • Target

    2465450d2988e8cf43a0947dd59c0fc1_JaffaCakes118

  • Size

    891KB

  • MD5

    2465450d2988e8cf43a0947dd59c0fc1

  • SHA1

    665bcfd95d4f771301e0a8dfd6892c6c6400eb54

  • SHA256

    8ef8ecbea088b72d0e48fcdfb580fecc1c8fd5ca9bd18d62548fe232a279c354

  • SHA512

    b6afe8471213d2604ffa0c05087736f599040ac4535bebdbbd380b6be06e9e99b84690ced2d4d0e7493a54314f1e315bb202c555b155490b8fa33dd565b22f4c

  • SSDEEP

    12288:3ZWtI6Rkp+erQZb+md4w1UAMh6pKKC/cdN9BcOuDQ8:3uhap+erQZb+md4wmAMh6gK1dNfcZs8

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2465450d2988e8cf43a0947dd59c0fc1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections