General

  • Target

    886a316ae3a8749cb49baf5e72447884_JaffaCakes118

  • Size

    379KB

  • MD5

    886a316ae3a8749cb49baf5e72447884

  • SHA1

    765148cce3d874d78757977740994df5493a906d

  • SHA256

    7d8e65786a303cce1198fcd98516557bf843d2d4e26d6b59e8bf66b1329a03b2

  • SHA512

    96a49a24482eaa76f689459dd6692a8d5174e016bac61cc5d4e14437af5a1392653a29593d31894f4e268addb0852d85ebf77f114841cdd4fc64240e064a9964

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORM6wiWAotwiWAod:mxjlVJnQiGP/evc2gT1Wcq

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 886a316ae3a8749cb49baf5e72447884_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections