Overview

overview

10

Static

static

10

6132a25968...18.exe

windows7-x64

10

6132a25968...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6132a25968a5c3e32c846f18b5131b62_JaffaCakes118

  • Size

    170KB

  • MD5

    6132a25968a5c3e32c846f18b5131b62

  • SHA1

    465e5f6d57b23b6aeb34f674aa0d5001ca125f37

  • SHA256

    9ffa1589177bdad65e98537b80c61587a9c47db8b3d8f2e286420bb79cb4a948

  • SHA512

    c370e5bc9963cc2d05ed249712293092bf3622c7e435c0a53ae5fc607f77bf2d7c26e5cd8117513622336af0ce79c2427df29cb7b7132ba5c3e170a9aae18b44

  • SSDEEP

    3072:vphqWv9FG/rj3ojCynthL2yo9ZkXJDxdsG0yaAY6nw3Sxjf:vpXv9djCyDL/oHgLdTwH6nw3Sxb

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6132a25968a5c3e32c846f18b5131b62_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    ca3cea1858131de1be21ad0065c0d492


    Headers

    Imports

    Sections