Overview

overview

10

Static

static

10

459d6e8c4b...18.exe

windows7-x64

10

459d6e8c4b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    459d6e8c4b60e0942b9e2459536b9b55_JaffaCakes118

  • Size

    286KB

  • MD5

    459d6e8c4b60e0942b9e2459536b9b55

  • SHA1

    3bb102eb0aa2dd548ede5dbab327f76d03721b2d

  • SHA256

    a521ea1515bb6de377e1d1fec9be33b8085725ec04064ffbf2af342a28318755

  • SHA512

    0b9e27eb6d5ff97b7ff776f52f1ad6ccae39cfa6b40ba0e08e4e982772710765de614d63a2fca59101a5a358c029fc032f2b8998b3d6d8d0dc5edec1b653f347

  • SSDEEP

    6144:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJHUH:Gt0VPFfsKAkrbPlUH

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 459d6e8c4b60e0942b9e2459536b9b55_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections