General

  • Target

    8eeb1d36c6b05dc1e6f970d9b7264799_JaffaCakes118

  • Size

    1.0MB

  • MD5

    8eeb1d36c6b05dc1e6f970d9b7264799

  • SHA1

    468b97cba97e69b7d0912e7c95e27e92b7cb5699

  • SHA256

    eaaa5e3c91aaa9097b6d3ddcf4a9b4942c799668589aee68627d614aa6493517

  • SHA512

    94b7cc88be1d17bad23e89d134f3df56691d0e9a81d6ccd0d39b253e14b9650b868bb3106ee39f7813b91cd585520c3d6d2a782e0571aa5dcfdfc1b3ed92890c

  • SSDEEP

    12288:pXDJlAghv3r+TsP9EtWhpjiAbATMM5F6Y:pllAghv3r+TsP9EQp2A8MM5F6Y

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8eeb1d36c6b05dc1e6f970d9b7264799_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections