Overview

overview

10

Static

static

10

ad549e3525...18.exe

windows7-x64

1

ad549e3525...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad549e3525e86c9b0aeccabdbaebd2ff_JaffaCakes118

  • Size

    152KB

  • MD5

    ad549e3525e86c9b0aeccabdbaebd2ff

  • SHA1

    c51999c6f37d17b1fab77fd375a1911ee270f701

  • SHA256

    36a2c396c3e15432125f6b92dbdfd7bc4c7d4d675b95f997ffedf2559da40a8d

  • SHA512

    e0af562d267566a9be83ca3218d2da7ee59f0746ea97d24b41a846e13db27a653b351e64b257835f0e20bd52119e58cb47320c81210e7f1be020708cd133e7e5

  • SSDEEP

    3072:DtwZSQpKa3VGVnRUlCz764/9xpEPBqbZuw55iGLhTeqovjvu:DEJVGRxx9bowZuw54Gleqoru

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad549e3525e86c9b0aeccabdbaebd2ff_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text