Overview

overview

10

Static

static

10

874dbc47db...18.exe

windows7-x64

10

874dbc47db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    874dbc47db24eecfbbeb08c978b2e9ec_JaffaCakes118

  • Size

    39KB

  • MD5

    874dbc47db24eecfbbeb08c978b2e9ec

  • SHA1

    2011cb0aa8f9d06bcdde0141d3ead069182940d0

  • SHA256

    43e1dfb13499dc3ebd0f79d6d9c08b9bb440b224e9e1255fe3bb1de720cdc160

  • SHA512

    72f5d9c669630e1329f2adb065fd31c2d4d291942e669210d6b14c2c727cc618249e5282fc0ae2c9260505c775b5d5d0159f0ff78718397f48a096df232b301b

  • SSDEEP

    768:QiS7XAbNjT/gUTQYkhn+4pUXGht0GmkNs/6rwBjVyOO/D8JSWr68BrUfjO:S8bNfTQYkhEseZkwjVyb/DKPSfj

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 874dbc47db24eecfbbeb08c978b2e9ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections