General

  • Target

    8716b01d52a7972afe9fa096cecd9fe7_JaffaCakes118

  • Size

    278KB

  • MD5

    8716b01d52a7972afe9fa096cecd9fe7

  • SHA1

    322a279cfc864a30c9b7527ed894cca5369ee908

  • SHA256

    128bfb3cee3fb54315ce7057bfd7f8d062879510d4000348888d015cf7a0eb7c

  • SHA512

    9b2506713fc622181b7adcb624da8918aece0a8cf86dcdc4648e3a37f66397707d65d065dab539b4f4f0bc4c56e5779f813ad01a82cd7fbfe6c84228375d82c2

  • SSDEEP

    3072:7oUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHPN:TGzRxSVtp0l6whGfsKR+zkBpTaa5tJH1

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8716b01d52a7972afe9fa096cecd9fe7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections