General

  • Target

    8cc0766ead4393a21dd95e9b8e9163df_JaffaCakes118

  • Size

    308KB

  • MD5

    8cc0766ead4393a21dd95e9b8e9163df

  • SHA1

    ed1304f6aaddc5a3dc5dded6f1970d8603c57e4f

  • SHA256

    d8e395adf45db0afcafa5ccb8096123e188d72d42822bf57e86e69ef79015032

  • SHA512

    98adf5cfad8567057f466c547a01802722611dda46380e44095e7012915b3f65cb956d2ef1bc7cea9dc1e78023d2fb45ed4e15c54505882e290bf76b8e826190

  • SSDEEP

    6144:TGzRxSVtp0l6whGfsKR+zkBpTaa5tJHE0:St0VPFfsKAkrbPlE0

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cc0766ead4393a21dd95e9b8e9163df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections