General

  • Target

    f53181756b3ef9877e6f04d865d63142_JaffaCakes118

  • Size

    97KB

  • MD5

    f53181756b3ef9877e6f04d865d63142

  • SHA1

    3c95008eacdd97db2543f0d3ed28aafd46d53fda

  • SHA256

    c803b8d7f020f0893dc789ceaa74542124c81d273a2f35b668cdccdbcc5a828a

  • SHA512

    e8060fed0503a4cc1a6d895a3824d2ed92d6c8e44277eb8ebc5bf26ad6831750dec182d5165bdcd968f27413e257e6c67ff6278e254860f8b0317acd4715742d

  • SSDEEP

    3072:NY55OR1kFIUM6CgeOpuP9ceT5QsOmKgqO:NPAFIttOpuOUBOZgt

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f53181756b3ef9877e6f04d865d63142_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections