General

  • Target

    82afbc2d888bd0cef24b167a8934a0b8_JaffaCakes118

  • Size

    97KB

  • MD5

    82afbc2d888bd0cef24b167a8934a0b8

  • SHA1

    7b2fcc0013cb2df73a6dc9ab76228aa2de409de1

  • SHA256

    98e473d956d196785610918ba9b1e0a4119df861e76d4f8a6b80d268e5287299

  • SHA512

    52dfba155868b8079949475f613896c39009ff97e1ee9bcfecbb4d32efff3016f8d4b8d8c138adb65fa6df0588453f98edf5a80b7baec5a9635949e930009e92

  • SSDEEP

    1536:0YDhyqDBp/0n6gE0mzA/ioB8DXzVgVl2gfeagZyFSyG7az65qiaTNAOvLLRkoXgC:0oyqDD06gEnCicl2gfeHzxkT7T+Ofz64

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 82afbc2d888bd0cef24b167a8934a0b8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections