Overview

overview

10

Static

static

10

5c17e7fc27...18.dll

windows7-x64

10

5c17e7fc27...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c17e7fc27acd714dfbece3421824eb4_JaffaCakes118

  • Size

    69KB

  • MD5

    5c17e7fc27acd714dfbece3421824eb4

  • SHA1

    d6ca96a30aef657d5047bf1739dd0d1913af1727

  • SHA256

    578c0ee79b3880632ce25200f8188958eba7013bea4cf7e69b6c9bf2b011ad48

  • SHA512

    42fc091deaa63b4799d13dfa5674c689c501a3e85ba3793614cdd8623ed636c82caa2b63c1715043d3229c58d2a2d8d52f1792f136453960e3f0b9a4c7eb0cbf

  • SSDEEP

    1536:K+WbrJcd/yfc9SWutMxsCVed7s03E8jByy/16:KzbrJi/Ec9S7UNedI03E8jByM16

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c17e7fc27acd714dfbece3421824eb4_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • A2
  • B111111
  • E141414
  • H67676
  • N454545
  • za9898