Overview

overview

10

Static

static

10

28c5113de5...18.exe

windows7-x64

10

28c5113de5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28c5113de528e9111cbebebf30c11f66_JaffaCakes118

  • Size

    39KB

  • MD5

    28c5113de528e9111cbebebf30c11f66

  • SHA1

    befb1908b87ddd23e3d45df6902fb689be7275cc

  • SHA256

    924ad235f4125230012813d8c196186c297c7d1010b73533ac22603863b9bacf

  • SHA512

    a8999c3bdfb71ad4c417dbcc3bbc102a4f171d4485a922b55bbde4e81b6c61bd1e77444c0de4e316575aaa60bd6ee2531e3c7822899fc3ea2ab0d3be5ff6fc96

  • SSDEEP

    768:A0ESYfGQvpAUjdMuBqTvA05Y9/5r8aI8gVUA2lL:+SaGApAUsAr8aRgVUb

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28c5113de528e9111cbebebf30c11f66_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections