General

  • Target

    ce5f2a4bcc3038d8c769a9c6e5424bc8_JaffaCakes118

  • Size

    955KB

  • MD5

    ce5f2a4bcc3038d8c769a9c6e5424bc8

  • SHA1

    d2db3b44014c9121a59ca6b059bb5c1736d6d1c6

  • SHA256

    2185753a9e90b245d3903d0e298d4f5f89bc939cad2570abee8fadb643673cc0

  • SHA512

    8a4c650b8c7b9a5f754e8207ff44e8a61a00142be2841ced0b874df90a5b8f5209a220d922e1594568e3c84254bfb0acb4b4154ca555c2bb9d3d828a601cc7eb

  • SSDEEP

    12288:SzQr+1kZVQQxfnr+TK7r79/JDXWE18qRzfG4M5kC1:uQKQVQQxfnr+TK7r79/JD71PRi4M5kC1

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce5f2a4bcc3038d8c769a9c6e5424bc8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections