General

  • Target

    fe8d44d0308e2a94d5d94fc90e1de02e_JaffaCakes118

  • Size

    52KB

  • MD5

    fe8d44d0308e2a94d5d94fc90e1de02e

  • SHA1

    8a10126785aed518cf736225b7ebb2cd925d591f

  • SHA256

    323cbc9f0bcac268d494fcb58264ca8d57f707f8ef337ebb8e6f15d935a471f5

  • SHA512

    d69ac5082b3461ddf36f0de2c45045df3b57d82c3989d50d27aac45e46fac4c11885e013e76bae0809e71dcf97ad6c774c62399fbd48e6e3bc0ee26fb0942834

  • SSDEEP

    1536:LrCG0KQtxTSqGTRDra0/uoyTPpnAXBKn:fAD3RGdrJiTP2+

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe8d44d0308e2a94d5d94fc90e1de02e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections