General

  • Target

    28ab30ad099870e7d378e52e34e137b7_JaffaCakes118

  • Size

    120KB

  • MD5

    28ab30ad099870e7d378e52e34e137b7

  • SHA1

    bd0caa523bb31609f46a569305b339782602f256

  • SHA256

    91141ea6e7b8753325a28528947b938afe7899f2b1edd8636dad93087d05c078

  • SHA512

    7c3d1b23d06aaf32bf479179f6e7ed621d1e4d3736864fd097c09febfd1f2876ff06e105aa50ada4c87dfa9452bff71214c9c928de3bc9fcd184638b901a16be

  • SSDEEP

    3072:DQj0XLXcCS2MRczZK8/y4pE2IybZuwBG1PM:BbDMGJyE51ZuwUB

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28ab30ad099870e7d378e52e34e137b7_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dcb4ee4a95e9c142f9bcb3b961b5ad60


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text