General

  • Target

    b99863964e521d51a31b9b8d08475551_JaffaCakes118

  • Size

    152KB

  • MD5

    b99863964e521d51a31b9b8d08475551

  • SHA1

    fbd717079a4246a5080252a803f9f898b433fb0c

  • SHA256

    f75727c8a5f81f42bb0e7a924d336e56b5aaf7adb1358fb659c33b74c8d8f581

  • SHA512

    8301039e9564db68e9fa3275ef6f9ef27b4d3e50b08412765217abe65fa9420e5d133201648a7bff96acfaba70027ff0495e61c956898cb8a679f8ca37810dba

  • SSDEEP

    3072:+MzpqT1wERlgJnlw3+VUewnCNhnZSzRK9TBftOIqnQJBhvFH:ZpqT1TgJnstnCNizRK9TBlOIqn

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b99863964e521d51a31b9b8d08475551_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    4da6c8ed1ebc9409fe69f46181693bae


    Headers

    Imports

    Exports

    Sections