Overview

overview

10

Static

static

10

2d354f129c...18.exe

windows7-x64

10

2d354f129c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d354f129cda59fcddf0d30d97db18cf_JaffaCakes118

  • Size

    160KB

  • MD5

    2d354f129cda59fcddf0d30d97db18cf

  • SHA1

    753425f704add5e5712d059ad96dfe9aeea364fd

  • SHA256

    f5ce0895952056b9ba875d475dc9029a7679fbe69b2430378d476c53b662fcd4

  • SHA512

    32aa3a5aeff68001577afaa08daa931e5ff6ca2c9222f5c9c7f64f864c93bcee1cc61dd58dee6831603b3ac4e2c763af61a2f1794217bd27f7592673a1772e62

  • SSDEEP

    3072:XPeqovIp0YFV6icDdqwnnLLKz7OYtc9BorPuZ5KdA/s8jRfR1HU3:/eqoERFV6icDdqwnnPcOwvf8jRfRS3

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d354f129cda59fcddf0d30d97db18cf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8fa21d910d752707e84e3a4519b661e3


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text