General

  • Target

    cfdc700137f8ee9b8e0b3a6bef948b2d_JaffaCakes118

  • Size

    100KB

  • MD5

    cfdc700137f8ee9b8e0b3a6bef948b2d

  • SHA1

    4b570610bb16dfc4f646d09a901fc1d17a5ded86

  • SHA256

    f12f9af47dd12f47511446bb383de0465f98d03dafaa3c689dc56ed6285c7a46

  • SHA512

    9ee36400062b9356fdb1312e539913c602543a90b1be2f8224829969bc99f1668ac87126a581d917e0a5a38112818df32786b1e3152996902e391a635222e72c

  • SSDEEP

    3072:1FMX5uF1LpwRvk8NS+ZygBBWBywXMOaF3T:1FMUndAkkqQBCywC

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfdc700137f8ee9b8e0b3a6bef948b2d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections