General

  • Target

    30be4bebb86714e9e4d937f84f6c8f6b_JaffaCakes118

  • Size

    122KB

  • MD5

    30be4bebb86714e9e4d937f84f6c8f6b

  • SHA1

    bf9dca2144d6dae574d2edbed1ae7d90aea06d24

  • SHA256

    6489a0358e265ef53abe83a4d767f52b30e6c9048b6dd1417244f2f842875d83

  • SHA512

    c805d5df895f40dd83add47f28fe8c2817aab3738e4979b57f09cdd57dc6b91f2967934727977952cc03fb36f49ce836ec4279bc5fd0e41fc92bd186e2573fa3

  • SSDEEP

    3072:kcNVa6wiraf91JcUcw/HUtpFXCAI5Zcp:t66wf3JRn/0tpRCAAZw

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30be4bebb86714e9e4d937f84f6c8f6b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections