General

  • Target

    e04a72f8310e98f143d8e8614e1afe1c_JaffaCakes118

  • Size

    111KB

  • MD5

    e04a72f8310e98f143d8e8614e1afe1c

  • SHA1

    e955fbf50ad6211582580aa61897c89650f4279a

  • SHA256

    a90441a49f9cb99601be52dc2efdb887167d9837b7ba78bedccdbeb750309b19

  • SHA512

    2e4a2bcacffbe44bacc19aba10ad5979a26a2637b5e8fba3a268da241ebd78e88fb250e492bd8ca3a10ed9e1176c7bf916750cce2e5fdad172a699ae40bec05f

  • SSDEEP

    3072:ql4EJorOZMQHbAD6D6FJBYs8ohq0ofTw+mkxuTrLZc:qFJQOZMQHbNGJS6hqNLw+Vxu/LZ

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e04a72f8310e98f143d8e8614e1afe1c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections