General

  • Target

    b59de95cea29b574e294bf41230e9668_JaffaCakes118

  • Size

    60KB

  • MD5

    b59de95cea29b574e294bf41230e9668

  • SHA1

    6390436697decfba609ce93e172490de4a587e4f

  • SHA256

    ae8a58019e1f2afda2500872c3662456da61692bf824366b2766ec5c0c45f191

  • SHA512

    d16e56d2f042455a657270488050fb62ee22257520942abc7613000a3925db1bcc12eb931b1fa7dcf32a9f83ef63fe4741fa29dd5707e7140ce8510d7f3a2fc2

  • SSDEEP

    1536:CI6sJ1S0xnBTySc2c4WId1sNRl3tFvVz9r5HMF:CZh0xBTyPkSJlr5Hs

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b59de95cea29b574e294bf41230e9668_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections