General

  • Target

    3d283d65b1776f7f4f77f7640d318916_JaffaCakes118

  • Size

    176KB

  • MD5

    3d283d65b1776f7f4f77f7640d318916

  • SHA1

    9a6aaca0a2446dfc8bcce14b300326f2c82454b6

  • SHA256

    f6a80ad5430202767087ec2d41d4a91d4bcfaff89b7e9c8396823c75bc96bb79

  • SHA512

    3640d35487d5b5a3168af0806e8ca7ef412d82fcdf10db873ff468df4eb422f4dbb635dbc23bab998b09b422cfd37ac638babe700e858aa07f92c8587e79fdb3

  • SSDEEP

    3072:Xa3Peqov90B74uFK0dkXR9NK/+EvY7EZK3oZM7V/re7RAJl:qfeqob0dMR9cbv6WK4ZMR0

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d283d65b1776f7f4f77f7640d318916_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    52896788833e844b0e23d3de7305e0a9


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/108.bmp
  • .rsrc/CPP/102
  • .rsrc/CURSOR/10
  • .rsrc/DIALOG/106
  • .rsrc/GROUP_CURSOR/111
  • .rsrc/GROUP_ICON/105
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/ICON/6.ico
  • .rsrc/ICON/7.ico
  • .rsrc/ICON/8.ico
  • .rsrc/ICON/9.ico
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/107
  • .rsrc/string.txt
  • .rsrc/version.txt
  • .text