General

  • Target

    07df96c037a429a1e6390ff70bcc9c05_JaffaCakes118

  • Size

    454KB

  • MD5

    07df96c037a429a1e6390ff70bcc9c05

  • SHA1

    785b8b06c5626bc6a9d312d7fbd244cc4ac6f893

  • SHA256

    a0eff24e9bc0b6c7bfab2e934d213a0cc0bc5c589d92b018e30e717a2e376a2f

  • SHA512

    c5fca999645740dda05abff1b23498ffe182f4780d3822a43b78689cfb522be43052447e8b9c3e05af26d93975a22ea782e4ae43044c046634e235579f55eeb7

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORMtaoK8OLhwiWAou:mxjlVJnQiGP/evc2gT1Wc8

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 07df96c037a429a1e6390ff70bcc9c05_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections