Overview

overview

10

Static

static

10

fecaaa6829...18.exe

windows7-x64

10

fecaaa6829...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fecaaa6829e0fe4796814eb427cfeb3e_JaffaCakes118

  • Size

    135KB

  • MD5

    fecaaa6829e0fe4796814eb427cfeb3e

  • SHA1

    6826cd262bd339a6945e59ac8cad0b3858a3c374

  • SHA256

    67735912aa13923134f8345a2bebfa6f13a7b2b8d62f516af76b8b3b603f1ee8

  • SHA512

    efdb886fe535aabaf09dee8134d49669c6eedeb0a8adc7fb03849406cd1d911746165950c191325f5590bc2a59a45d14b55ec68a0011aeef5fd55cd9143fb224

  • SSDEEP

    1536:/EBg/eOrG1jTQQeSaTTsmE3Bng6ToEAFmz4jOIDwurcjAQRAHUAxcQk7bv1XJ6Db:/dglYJ4ToxBsu+wO/dXJ6DJFoutW/e

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fecaaa6829e0fe4796814eb427cfeb3e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections