Overview

overview

10

Static

static

10

5f102f0cfd...18.exe

windows7-x64

4

5f102f0cfd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f102f0cfd724c68546217b5389c9b64_JaffaCakes118

  • Size

    184KB

  • MD5

    5f102f0cfd724c68546217b5389c9b64

  • SHA1

    b6036fe041a10c786ce10a1632fc5b7a3956039e

  • SHA256

    8786520f1e1b3408c6c7c4ab59295c121bfad998395abd8b3ab4b05dcd40fa89

  • SHA512

    99aeba98ee2ebd1ca83fa07fbb1c7e81587c6fcf2b18d6167ae52c3bef769d90b5bd58c10c0b34536167906d2f73803ea4508d3e760d11bf00d4e7c0d8093b07

  • SSDEEP

    3072:gcWYIOFte7tPdGYnNnVzamxH/tiZ+1cfk4TwIz6rYGPeqov:jWYFkfnV7Ztmffk6wQKYeeqo

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f102f0cfd724c68546217b5389c9b64_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1d1a38da13d04677f392f9ca4e289b52


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text