General

  • Target

    3a4e9895f8c3a4182063d829f028eff4_JaffaCakes118

  • Size

    672KB

  • MD5

    3a4e9895f8c3a4182063d829f028eff4

  • SHA1

    9aac5d937681177af868df0d772206e439eddaf8

  • SHA256

    34fbf4301ad670366812e984aa04740ca67720913e3ef9d98ab7fba802edae49

  • SHA512

    d5f2791e8afec1d839972c7bc6ec2a67c0b436ee707b8ac962aea14bbc7a2378cdf382131d9be5cf8fe3748ab778f364d437ab7683ec670d8273d65d9cf6f131

  • SSDEEP

    12288:xidl4blT3O/T3gwmLcATGh4jidl4blT3O/T3gwmLcATGh4fO/T3gwmLcATGh4z:xidlGIT3gwmQAyhaidlGIT3gwmQAyhAh

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a4e9895f8c3a4182063d829f028eff4_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    f8f487b4ee0785d90fcb0900d65e30b6


    Headers

    Imports

    Exports

    Sections