Overview

overview

10

Static

static

10

b64a16367d...18.exe

windows7-x64

10

b64a16367d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b64a16367d003bdf02c1dd6d014e3c0e_JaffaCakes118

  • Size

    61KB

  • MD5

    b64a16367d003bdf02c1dd6d014e3c0e

  • SHA1

    b21fc2cc0324f865a838cb8e2bae1ff3503063c6

  • SHA256

    edbbb2d16fceb8bb1c9ae76439a5f4e1cc222c89bc8ce0d4ac4a9aee9961b3fa

  • SHA512

    b827ebb9e8d865c6c760692c85ce98c706a5f578e3737bcbc9f5775a0f0625a9c2ff3f830079887f72d26a6a71b4ddfcfd05852f8b8778278f7ead90ee3e4ca5

  • SSDEEP

    1536:Ai2602a7i2D1B5TMNfs/WHHHIzke94ywErQok2xJWvNMF:AKa7i2D1EfUS7ok2xcvNs

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b64a16367d003bdf02c1dd6d014e3c0e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections