Overview

overview

10

Static

static

10

c0f312da89...18.exe

windows7-x64

10

c0f312da89...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0f312da89f2e52cf3b68549e4e531b5_JaffaCakes118

  • Size

    282KB

  • MD5

    c0f312da89f2e52cf3b68549e4e531b5

  • SHA1

    6f437c676faf2d20f209e846c7bf588255b054c0

  • SHA256

    13e81e5feac069fa5a66c2a97d06819f5237b6bf6f474087680b3475834c9ec6

  • SHA512

    c99f0c7e8f2276333fc80bf8ae01a8d4052191f98bc99ced3e8ba83903bb586ab8c77189910ec5eb7a9530030d5288a62e40d9dd1831065be10ac2f6d217801e

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHYb:Dt0VPFfsKAkrbPlYb

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c0f312da89f2e52cf3b68549e4e531b5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections