General

  • Target

    346751593d5bcb68d995c533f227fbfc_JaffaCakes118

  • Size

    284KB

  • MD5

    346751593d5bcb68d995c533f227fbfc

  • SHA1

    df6774491bd367b9456255c8a1780884aed87f38

  • SHA256

    a6c55206f0f9018f10c9a85321246b03cadad6d20101cf884c3ef7f2bdc86cbd

  • SHA512

    69a3a1f417789f003b7aa59e4277110ddce83c993492053d9657329ace5c046fee80c269a17181500c933bc0e1667ec8a56584790977c50fda5c635e3502cd4d

  • SSDEEP

    6144:OGzRxSVtp0l6whGfsKR+zkBpTaa5tJHEqO:Jt0VPFfsKAkrbPldO

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 346751593d5bcb68d995c533f227fbfc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections