Overview

overview

10

Static

static

10

fec3b99f53...18.exe

windows7-x64

10

fec3b99f53...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fec3b99f53eace4abb37a88af5829f6b_JaffaCakes118

  • Size

    204KB

  • MD5

    fec3b99f53eace4abb37a88af5829f6b

  • SHA1

    d991c293509cc43a38a3a17b4ecd18973e6537dd

  • SHA256

    3a84215d6634c38e7da6ad6482e047978babd6e94ebcaaec3653ddcbe16fb5aa

  • SHA512

    0ebbc6e58de8edc27b80d04b27f4f209e43834102fe17c5f7f688120605ba3af68ebcb3ed1407a66a1d45892a1cf89237e1171a30bff2f172d1ff1acf9b959ab

  • SSDEEP

    6144:JsIt6nWtQbBTyPRqyhYPbFcTBlhHrqndnkv0J:29WthJq8YPbFcT3l

Score
10/10
vmprotectgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fec3b99f53eace4abb37a88af5829f6b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections