Overview

overview

10

Static

static

10

8c63a17a84...18.exe

windows7-x64

10

8c63a17a84...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c63a17a84626d20c03972a6e7118355_JaffaCakes118

  • Size

    95KB

  • MD5

    8c63a17a84626d20c03972a6e7118355

  • SHA1

    ca70389c0a645843701d52ea65ceb881c5ee9690

  • SHA256

    a56706c0409b1790b2aa362f7a3ef1632180adc51c3b4fd0e07621b3306e72e3

  • SHA512

    59ab5550304b7c0b97de17071496b43e87d9b582821edf41c8bef0bb7bf05eba9e972459b0e32a818e1f2226b7133c6c50f2e91d9b8245e42df17e4674d418d5

  • SSDEEP

    1536:2HcjQqO22qDelgA9SmHElnTz/dcbq3fmr8UXX0ahmPBrspUc:sqO2zUgA95U3/dAqvmr8VomPBrspU

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 2 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c63a17a84626d20c03972a6e7118355_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections