General

  • Target

    db6e1a196bc06154669f7a3059c6ee9e_JaffaCakes118

  • Size

    134KB

  • MD5

    db6e1a196bc06154669f7a3059c6ee9e

  • SHA1

    8590ec841ef3376dc8b227b7ba8e9b7f7673e68e

  • SHA256

    3569165fd7a48aa6145cb4f62b65b7f6e94ca742e3f3ea2504335914f07676cf

  • SHA512

    571a3b35b83387474b9fc95c94d33fbfa928a7c85ca1753fec1689d4b9e28e9eab874b5ba94e567caf3239574fc72113428ebfb7703eb98146884dda9cd775c4

  • SSDEEP

    3072:Y3jJpCL3nMGe+IpQ31Wsb8F6I64tc+ZyB:PDfT30H64tc+a

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db6e1a196bc06154669f7a3059c6ee9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections