Overview

overview

10

Static

static

10

35798269e2...18.exe

windows7-x64

10

35798269e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    35798269e2e3fca6c8feb39c55901670_JaffaCakes118

  • Size

    394KB

  • MD5

    35798269e2e3fca6c8feb39c55901670

  • SHA1

    f746b10c33f3a21433c797e8012595c323a6d862

  • SHA256

    c6403df1b9172cc513a6b2aa39803bdf3515e356457513c13e3644aad6c6f20e

  • SHA512

    b1f13b093a9c5f0bfb7317850eb2642ac274e91a5019ca26e61cfec42192b528137d186e8b61df1d07e31089b4f1eb9a615bc99d0c81610388459a1ad413552c

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcOR7itaoK8w4X:mxjlVJnQiGP/evc2gT1WcoA

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 35798269e2e3fca6c8feb39c55901670_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections