Overview

overview

10

Static

static

10

b0dd594823...18.exe

windows7-x64

10

b0dd594823...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0dd594823957647c3a3757843c486be_JaffaCakes118

  • Size

    146KB

  • MD5

    b0dd594823957647c3a3757843c486be

  • SHA1

    f7028b6d1e3a6f0922df37b3f86f5922e217e788

  • SHA256

    fdacaa7e48e5eefe04d576ee1354aa8a305860df8485423d47e3feceb670de75

  • SHA512

    28d633bda61d0f0bc1d8370d87ea3a7864ae7cff0123701719df174e1a77276362e11b1baf0a1de43c5df98a28ad7661bfc2698da5d9f021672e472d9a1d748a

  • SSDEEP

    3072:WgEehZ6lngDMYUxHkq15yoY0f4S07tVaTqXuz1KJoZAo5LH5u:WgEehkHkmMoY0xoV00uz1PZAS

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0dd594823957647c3a3757843c486be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    282f31ba2e0840b19e8d475de20a4b27


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/108.bmp
  • .rsrc/CPP/102
  • .rsrc/CURSOR/8
  • .rsrc/DIALOG/106
  • .rsrc/GROUP_CURSOR/111
  • .rsrc/GROUP_ICON/105
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/ICON/6.ico
  • .rsrc/ICON/7.ico
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/107
  • .rsrc/string.txt
  • .rsrc/version.txt
  • .text