General

  • Target

    2aa06aeae549a7d97e0f8434358b7577_JaffaCakes118

  • Size

    147KB

  • MD5

    2aa06aeae549a7d97e0f8434358b7577

  • SHA1

    178891453aa5963f5a4f0d8f127137071233fab1

  • SHA256

    56b1890d3970e86585659872b967f7b4b89d230e44634cef2935a3af263f0e53

  • SHA512

    80a885949bbc74b2864ba6d17be01d027882b389f8abf2232ff8980b5379cf638f7ea938c0b7fa5be12b36fa1f2adacd025f8bfe69781963620c40eeedf508d8

  • SSDEEP

    3072:gKyA9gZ8mrM47MQHEL/a3VnK8ahRsYFI8xALZ/N:gKy2eHETaFTarDFI8xwN

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2aa06aeae549a7d97e0f8434358b7577_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections