General

  • Target

    deb93dedcd55d279f953c2983974b47b_JaffaCakes118

  • Size

    107KB

  • MD5

    deb93dedcd55d279f953c2983974b47b

  • SHA1

    a38b66fe60f667ac566b7e8d51c523224f7f0574

  • SHA256

    4e72beba1db20c13c45b5b42d99dad777130060433dedeb7bc3e451aceda3b15

  • SHA512

    d9ebc2b09eb90f684bce59d7b6173e3368d550d02575fad6d65e0648e46d9c966467e3b2d89d223dabb732d532f8df0c605a74414e92d2985ae666408b343eae

  • SSDEEP

    1536:0H+ajA2ci1BfiacdFLtCFdwrqz15jVi8gw1ThpkR5wZq4FD:0H9A211xiacR6tz15ptnhhpkR5wZqGD

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deb93dedcd55d279f953c2983974b47b_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    c8d4937f9e67ace366f51346e20b8a2c


    Headers

    Imports

    Exports

    Sections

  • -3
  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 0
  • 13
  • 15
  • 19
  • 23
  • 4
  • 5asdfa
  • 7
  • 8
  • adf16
  • adsf5
  • cccccc
  • ddddd
  • df22a
  • hhhhhhh