General

  • Target

    5d91ed0ceedbf782ab795774e5fba482_JaffaCakes118

  • Size

    68KB

  • MD5

    5d91ed0ceedbf782ab795774e5fba482

  • SHA1

    c55cbfc3d876f0833da0c2951ddacc6836168780

  • SHA256

    f495c64d6c4dd0c5cf5ce0f4d793b3263434d60dd142e9f4f0efccc3823d6a0c

  • SHA512

    8858689dca52bdd4aaa0d252f9c7430900578a14c7f18fbc866d621c903ca73eaffeae51406209bf00487beec8ddc5930025baf11c09767554fd9c481941d83d

  • SSDEEP

    1536:5FUYalDF1LpwcWvSf8NS3At/BzbCgBBWBy4vXMav:55uF1LpwRvk8NS+ZygBBWBy6XM

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d91ed0ceedbf782ab795774e5fba482_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 00000000
  • 11111111
  • 66666666
  • 99999999