Overview

overview

10

Static

static

10

8a5b693078...18.exe

windows7-x64

10

8a5b693078...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a5b693078d121978ad1607f6fe3aa27_JaffaCakes118

  • Size

    152KB

  • MD5

    8a5b693078d121978ad1607f6fe3aa27

  • SHA1

    263bafa8af79bb60a3dd1c921ff30c69f2173247

  • SHA256

    2af13b4469f331a6087fab88a189e93271e9625b93beb45d29c73c110d676626

  • SHA512

    94b40b5687b90ee6a5b205eb12cf51d11dda5ef90829a01ca9947f1194451a7c399450983b70845b44206f6baf7157734384dc5a60401d2e5ffe80aa69f0ddc8

  • SSDEEP

    3072:brAsU4cQIuP1YTzA42vdwe5jma/cQbqRNbqI6ZzOjh3Q:bjIa8Afvqem4yRMnzO9A

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a5b693078d121978ad1607f6fe3aa27_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    df0d3bf75c26a6838d2c3b958d751b10


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/MANIFEST/1
    .xml
  • .text