General

  • Target

    ddd1146ba43ecb504e2823cc3d355552_JaffaCakes118

  • Size

    205KB

  • MD5

    ddd1146ba43ecb504e2823cc3d355552

  • SHA1

    21c99e5127a7ca0817d8cb6ecbdcacd0fe4ccbe5

  • SHA256

    c0b008d12438d9e580e639cebb66a0e0eb556477ea2c1e043e41b44bf31c291c

  • SHA512

    928bf6aafa41d3090a966b569a02b83d203ba88cf60de1664b27a44045b747cd00cc316b3e15892a8f77da3e2672c5934802be0ff1f979870cdb0d3ab7af220b

  • SSDEEP

    6144:GvnWn02r8eh+tDPY/yNomBTBljPmnbRQ:uW0m8eh+NxomBT3V

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ddd1146ba43ecb504e2823cc3d355552_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections