General

  • Target

    260fde39ceaeb92e9405880688bf0de7_JaffaCakes118

  • Size

    278KB

  • MD5

    260fde39ceaeb92e9405880688bf0de7

  • SHA1

    2baac5bff4dde250cef2690054c0d24d9595d683

  • SHA256

    118cddc3e8aee496fe7697c1353a640c4e7c50b10a572c2149155692586b70fa

  • SHA512

    8675be51bdb191e1f02832c07b25fb2aa5de0f606f21fe1a1429847de5a6b8e622b7f85398a916f453c3bea034cb6c5f3cd447adaeb64183c4f274e89ddf6ed0

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcoAtoOZkU3C:mxjlVJnQiGP/evc2gT1WcoA3C

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 260fde39ceaeb92e9405880688bf0de7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections