Overview

overview

10

Static

static

10

30b0f80005...18.exe

windows7-x64

10

30b0f80005...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30b0f8000519f572bcabdec90617edbb_JaffaCakes118

  • Size

    320KB

  • MD5

    30b0f8000519f572bcabdec90617edbb

  • SHA1

    4c4e17763cbc898714b8455eac803ecc54957857

  • SHA256

    8de09eaf29fed555b6ed334709b2572d646bb31076cf667e50d0b2ccced56c2f

  • SHA512

    275b2ded3986930fe2c0ec3e9645b08aec8e2c6dbfbbc96b2e010e17d77d3ae1ccbf92feb4e68329529f48bd1d5722721d6c209e7c326cc5dcefb048f695f388

  • SSDEEP

    6144:CRzHQbUMHyd/LXxaBWhS7aytuIqOhjFRtM:gzHYzHcJhSuyX3v7M

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 30b0f8000519f572bcabdec90617edbb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections