Overview

overview

10

Static

static

10

440cf95482...18.exe

windows7-x64

10

440cf95482...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    440cf95482746a19524499f1772e5ff9_JaffaCakes118

  • Size

    282KB

  • MD5

    440cf95482746a19524499f1772e5ff9

  • SHA1

    ae925822b1d1fb4c8c64805b432c35053e24690a

  • SHA256

    a16c6050ac6dc08eae5e9e43e5b33a0f368747c380ac8020d1574d12edf229ca

  • SHA512

    4d1b82ad239e27f4359a46295d5a15f150c66ed61c405d5db7a2b36c8404d99a53e3e00a318dcebe9690e8a3578014feb04d9770f908aaa0166a0cebff071c9b

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHYw:Dt0VPFfsKAkrbPlYw

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 440cf95482746a19524499f1772e5ff9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections