General

  • Target

    f7007ed04101f556ae2cb2523c593283_JaffaCakes118

  • Size

    955KB

  • MD5

    f7007ed04101f556ae2cb2523c593283

  • SHA1

    ac0d3f209e3f2e1835c91da73009e9171f4d3b30

  • SHA256

    bd341387409ffa332cf1a212b410688165f589a95ad2a906ab00efd247151bb2

  • SHA512

    35ce604efd372786dbda60772a1f7429733fcbf215d8956be7823349a688d5f6dfa8b72287b6c16ad02b32cc80d6070f97e978034f22202195e7c49af29d9090

  • SSDEEP

    12288:SzQr+1kZVQQxfnr+TK7r79/JDXWE18qRzfG4M5kCZ:uQKQVQQxfnr+TK7r79/JD71PRi4M5kCZ

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7007ed04101f556ae2cb2523c593283_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections