Overview

overview

10

Static

static

10

8ddc0e1582...18.exe

windows7-x64

10

8ddc0e1582...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ddc0e15820a199e981e4a9e8ca63938_JaffaCakes118

  • Size

    288KB

  • MD5

    8ddc0e15820a199e981e4a9e8ca63938

  • SHA1

    bb119e63eca0580967824d476697354c1af2d886

  • SHA256

    971569a2822c84cfe069ea3052878793da25685d83521ba3efa2fe3f4fb6c255

  • SHA512

    d30a50d848cf38d39f3062598d6922c2e85fa962b447ab82ec77a85de36d7342ea79c92477ce4639724e247254cb368d83d5fc2cc6631ced45879549c523bcb0

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORMtaj:mxjlVJnQiGP/evc2gT1Wcc

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ddc0e15820a199e981e4a9e8ca63938_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections