General

  • Target

    45b44b34e591d86195aea29e5aeefba4_JaffaCakes118

  • Size

    164KB

  • MD5

    45b44b34e591d86195aea29e5aeefba4

  • SHA1

    62101443ea870078f146da072f4e992bb8545a9c

  • SHA256

    6a4aad2293ee2fa85db253b03c784724acbef67f1ed3c8df89effa1b74fa013e

  • SHA512

    3afb8cad07fdbcc847f859e6e4d013e8227920498ba8f5604f4b88495d874524f05ce0310b0f0c1730613daccd2d581e798cadd56998fbddd76c5f8ce1fcba20

  • SSDEEP

    3072:DoUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJH9BYt:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJHa

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 45b44b34e591d86195aea29e5aeefba4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections