Overview

overview

10

Static

static

10

261ec5f92a...18.exe

windows7-x64

10

261ec5f92a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    261ec5f92aeb98a91307191395329a2c_JaffaCakes118

  • Size

    386KB

  • MD5

    261ec5f92aeb98a91307191395329a2c

  • SHA1

    a0a1c8ee919d56fc4b56d0bb63a0be6a8ae663bf

  • SHA256

    19ff67f5af04cdaecfc1252f53f0437321d89f339af0afcbd600520379d68b79

  • SHA512

    ed8ca147877915f82289756a0dfdc49552969910774d753e8fc08c48a99dcb0b2cd783be1b43d791f65f14e6f34aec09add4831bfcee1a01745a5fe91b1787be

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORtwi2v9:mxjlVJnQiGP/evc2gT1WcXv9

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 261ec5f92aeb98a91307191395329a2c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections