Overview

overview

10

Static

static

10

3cf47c53db...18.exe

windows7-x64

10

3cf47c53db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3cf47c53db32c1db50fbc1eb6ae63cf7_JaffaCakes118

  • Size

    82KB

  • MD5

    3cf47c53db32c1db50fbc1eb6ae63cf7

  • SHA1

    7ab9fb6b302484a941c0fbb66c0bdab066f3ec56

  • SHA256

    6a5b018248eb78ee89280f5331a2298a2eed1d114e76643af9b71bf55dd9033c

  • SHA512

    cf0290e1ca6137150a49cb33d0bc58008ed3e234a8ac57490990dea881f7698306a08f58a91c4da4c6e4e42a9dcb3965425db87431d74c81cdc1da8561b09154

  • SSDEEP

    1536:L9871kQ49q77imzpNX6RwuG6AjrSh4PQwea5rhn55y6LAv9zMTqsx7Q:J8CQ49s2mzpNX66/jrDQva5NnePk7Q

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3cf47c53db32c1db50fbc1eb6ae63cf7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections