Overview

overview

10

Static

static

10

4d6a30fa06...18.exe

windows7-x64

10

4d6a30fa06...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d6a30fa068935d235acc25653edd768_JaffaCakes118

  • Size

    117KB

  • MD5

    4d6a30fa068935d235acc25653edd768

  • SHA1

    f85870af658faa97a5c3046f2cdd80ca14795c15

  • SHA256

    0c9147e69d99e0f112f1a5241b44ae9d5451426c8151a612702133c8d2a40293

  • SHA512

    ae3544b952058ccccdf219ddc2baab95c67a94c7ff2c9cfd9e1f46490ed01a4255b1bba13c1c3f9c32fa0209c303cf018ce047f81f2aac3056af71b1328a79ff

  • SSDEEP

    1536:PTg5O+R1A2ci1BfiacdkLtCFdw9ioIUqEmTTJ+9SCkR5wevIx:LgrA211xiacC6voIUqEuJZCkR5weQx

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d6a30fa068935d235acc25653edd768_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    5b5d4c0a295d693c85032ace50a3823d


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 0
  • 1
  • 10
  • 11
  • 12
  • 14
  • 16
  • 2
  • 3
  • 5
  • 6
  • 7
  • 8
  • 9