General

  • Target

    04cf06a1309a49a83ab599cf09cee719_JaffaCakes118

  • Size

    1.1MB

  • MD5

    04cf06a1309a49a83ab599cf09cee719

  • SHA1

    881f49d5b1558939ac38dbb547b69af412794f18

  • SHA256

    d833e358525b4a39c314f07759dae7013d69910a15cff1a1d355b11240d66110

  • SHA512

    a28909a01fcec65c7052d1b1c4cde7e673526e53e92c5cc729d95b3c40909399c8a2e17071a311cfa188ac4ca2fb6003d37d5955b61d0e2dd3d356530c012d11

  • SSDEEP

    3072:EsOOF3+yKtbG1YOyQolooT0m8pMSRIh/oeNTBftgFLnOinHDEIwne506Hn/4:EuFurxMYZlTepmjNTBlgFn7nHSne5f4

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04cf06a1309a49a83ab599cf09cee719_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections