Overview

overview

10

Static

static

10

618cae5f63...18.dll

windows7-x64

1

618cae5f63...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    618cae5f634be138410fce5483392d77_JaffaCakes118

  • Size

    68KB

  • MD5

    618cae5f634be138410fce5483392d77

  • SHA1

    94f45ec4d5d6c93c417fa0e4a91dfa23746e5abd

  • SHA256

    249d318ebe4f96f410de576a1887302308ce9ddff0e320875ec9cd7e95313547

  • SHA512

    e643ba7b21c50200eafce95129e0f536ba24bc1defe30c18efc06782ed0c993727150095335b766e4cb84ab94a8a3a83f469ec7199ef2a01a96d3bb9ecb0f48b

  • SSDEEP

    1536:5FUYalDF1LpwcWvSf8NS3At/BzbCgBBWByiHvXMav:55uF1LpwRvk8NS+ZygBBWByiPXM

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 618cae5f634be138410fce5483392d77_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 00000000
  • 11111111
  • 66666666
  • 99999999