Overview

overview

10

Static

static

10

a60f0f407d...18.dll

windows7-x64

10

a60f0f407d...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a60f0f407d2e197087d778de5cb5f475_JaffaCakes118

  • Size

    135KB

  • MD5

    a60f0f407d2e197087d778de5cb5f475

  • SHA1

    a007d2d71528808f9e0698f5d7b4e5986c687d17

  • SHA256

    c9a3bd3cea1911b197e06f4b9e6227b995c6c793848624e732a97710a71fcaa9

  • SHA512

    5b45d0134fca5da1841afc6b869c0514d0bbee28b55a0e5fcf0bb1e98f163e32f3bee08e71bd0d86e7a9c20bc4fb2e8599f265a64a4ae44f4d7976b8ec4f96e5

  • SSDEEP

    3072:0pF1ucA/Py2q2oGSe0cDnT0QDqsx0Y9BsqY/PNgu/z/:0pF1A/PyV2oGSe0A3q8v9BsqCNZj

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a60f0f407d2e197087d778de5cb5f475_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections