Overview

overview

10

Static

static

10

cfc714acf6...18.exe

windows7-x64

10

cfc714acf6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfc714acf6e9c9d8c907e1056b3df837_JaffaCakes118

  • Size

    39KB

  • MD5

    cfc714acf6e9c9d8c907e1056b3df837

  • SHA1

    e1d1483abca7ddf2a3c5a45d124f62924fa730c3

  • SHA256

    d8c41b78fca0d26e309fac42a2e2da7154061a3c4658783c0b1990a087e870ed

  • SHA512

    003cf1df5c4a6de2eba85351d9a162628c650f90fddb697f4b5014a7995b2ff8907f07da190356b9b5c59c102590f17d6056641e4181e68c9973db7bf3cf73cf

  • SSDEEP

    768:YJue1m2C5UZitgYBZxlRo+bAsbHkQ25dK4Oaq23mRBrUfjO:Yce1m2CbgWZxfo+sWEQidHPlmRSfj

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cfc714acf6e9c9d8c907e1056b3df837_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections