Overview

overview

10

Static

static

10

8c7c0908c5...18.exe

windows7-x64

10

8c7c0908c5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c7c0908c568f0fa36cced3953be535a_JaffaCakes118

  • Size

    255KB

  • MD5

    8c7c0908c568f0fa36cced3953be535a

  • SHA1

    041e000bbe790abceb218606bcd0cb69d877388f

  • SHA256

    3907c43ec5451538e359699b84382f5d35c1d99e1e61e31987655089a55b2936

  • SHA512

    ea5c0697d834249dcf1cace7abbd08d88ea33e75bef8a16826738190f2a1224f889683a27e93bd31f5c4e7d7ba0485ea6f2cd2ea3b2b5cd585fcb8bd6bb60cf9

  • SSDEEP

    6144:TGzRxSVtp0l6whGfsKR+zkBpTaa5tJHLI:St0VPFfsKAkrbPlLI

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c7c0908c568f0fa36cced3953be535a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections