General

  • Target

    fb69be2be322970858168e734b9a4fe1_JaffaCakes118

  • Size

    152KB

  • MD5

    fb69be2be322970858168e734b9a4fe1

  • SHA1

    79a051a544a04641a1f8dfccef009f0a458e385d

  • SHA256

    071b7432f65d2073fa5fd92ac0da77e49bee42b909920e2fe94862bad79c866b

  • SHA512

    8d07d8b56e49cf49d5070789a8b94be623b457dcdbd99ce7a873c727b49ec8abc91dab79db42c3640904027ae083a31b44a69117dbf82f4c465bb0645850ce90

  • SSDEEP

    3072:uHb6Dqok9cWgWFdiQ0dRVt0zcfITBftriVDov:uH+oFp0zocfITBlp

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb69be2be322970858168e734b9a4fe1_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    81ad814e4b99015a7abea0708b4813cf


    Headers

    Imports

    Exports

    Sections