General

  • Target

    2e19d3fa628065d6e619b9fb7cb61827_JaffaCakes118

  • Size

    102KB

  • MD5

    2e19d3fa628065d6e619b9fb7cb61827

  • SHA1

    f98a650dd478ccb7604fbe6e12f5e2c5a8e9b07a

  • SHA256

    782bf8c8a678ced2834e786a982f223e8da23e8e6c557aed3a61409ce523c933

  • SHA512

    daae6bf897073de8d4d08fa7bd101c4dacb7124298dd9e8a58a4977aa55cd00e389201cc9e67dcce9d40edec47183a4dc3004612315a288dd41a90bb0133f63c

  • SSDEEP

    3072:8kISOIBrepzL9dFtl90ljDCn9Fxq676mi0dx:DOIxepzLDFtvOvCnbP76qx

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e19d3fa628065d6e619b9fb7cb61827_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections