General

  • Target

    278b8751aa4809a9095bffed8d1403f1_JaffaCakes118

  • Size

    64KB

  • MD5

    278b8751aa4809a9095bffed8d1403f1

  • SHA1

    b81c7845451f80ee8a82383702563a792668dd32

  • SHA256

    db0e0c9a0d57433ca1d64ff87d5ec92d7accb7f26464609b4d82109fd9924947

  • SHA512

    2ad5a835ba09116dbb6fec1a490492acbf097a69a65eb368b37d80bb45c8326617d5f739f38eb42a61ea37f47b6535213f96ec9937a1c2ea87167a9cea78e5a0

  • SSDEEP

    1536:A0kcQrEf/RIKvzN8fGbdgfVgmoa1WtLQF4vmztw+jTDUJpA:AbrERvvAU23Dj3eA

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 278b8751aa4809a9095bffed8d1403f1_JaffaCakes118
    .zip
  • QQܱɵ.exe
    .exe windows:4 windows x86 arch:x86

    03f2c2376dbaab48c69a23e5f572970b


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text