General

  • Target

    2ef5fce3d917379b0db53a0bf390bf9e_JaffaCakes118

  • Size

    4.5MB

  • MD5

    2ef5fce3d917379b0db53a0bf390bf9e

  • SHA1

    824035539b7b9c7488efb62be6ffcb1a18e94895

  • SHA256

    77c524ede147fffe5b35e90e0be9dd489998c8e7d4a7abb252737de905e906f4

  • SHA512

    9dc2df146c45a7039a20b6c09217971c4c8926f1c58f9458377d75172837fe7f5ae3a463106673663624c632fb1cbde4af6de1b4e4f7e41e30d2e96366b88107

  • SSDEEP

    98304:t/uatZmDhlWHBKYQo0y5J55WRwmJ7eccE7ZNIFLuYwhuNH52YZhjEHk:qqB15ZcR9q1cHOLuBul8YZd

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ef5fce3d917379b0db53a0bf390bf9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b14ad6dfcc6e808919a618d1e14dc1b8


    Headers

    Imports

    Sections