Overview

overview

10

Static

static

10

f041f10ea0...18.dll

windows7-x64

7

f041f10ea0...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f041f10ea01cee0ef907580ab70f1fe1_JaffaCakes118

  • Size

    47KB

  • MD5

    f041f10ea01cee0ef907580ab70f1fe1

  • SHA1

    00d76ef499bbaf6dd4d99480c2d030bbf4199e4d

  • SHA256

    15b49696fdfa60faeb263bea6a8481302a976743a83f606e051fdc2c9efc4882

  • SHA512

    babda9c9cdf535294ccff84bba59c74e8abbd13a0ef088abfffd0fabe4d342663dc5459ca1f97cf6fcc998eb1872344b53ba662ac8e9d76dbdbce6d3c1d730d4

  • SSDEEP

    768:FEFmLhSdbPVYOUmNepEJlJ1hfcAgEEKblEf1QkbbN3CDkDd7wnCo/FSRw20K:iF8hSdrVF4VEEKI+QUmMnCo/IRwp

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f041f10ea01cee0ef907580ab70f1fe1_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections