Behavioral task
behavioral1
Sample
0baed4be0e4aa11c4068705eb8fdf47c_JaffaCakes118.exe
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
General
-
Target
0baed4be0e4aa11c4068705eb8fdf47c_JaffaCakes118
-
Size
134KB
-
MD5
0baed4be0e4aa11c4068705eb8fdf47c
-
SHA1
b4dd67e6c9e537297b955dd5ee827f7fa06ed2c7
-
SHA256
b703ab9a40b314b3092e95f13ea53d3ece30aecb2b96bb8a8a7964d27b4f44ff
-
SHA512
fd61cbc1504a949b8a49a273ce038f061c99713f66ef10488259da53b643238692705b52866f8a04a3ed6531825a0c02ea6aeb44d3aa5d71b18ea13d82e98642
-
SSDEEP
3072:mFH1lqfM4TYZesGO4Qg/0ilm37GBYfiA+SIML+HsZwUr:m3lqfTY4Yjg/0VqY6hMLruE
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0baed4be0e4aa11c4068705eb8fdf47c_JaffaCakes118
Files
-
0baed4be0e4aa11c4068705eb8fdf47c_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 124KB
Size: 144KB - Virtual size: 4B