Overview

overview

10

Static

static

10

3e9bc8c83d...18.exe

windows7-x64

10

3e9bc8c83d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e9bc8c83df1a740d422fc35fae579a0_JaffaCakes118

  • Size

    39KB

  • MD5

    3e9bc8c83df1a740d422fc35fae579a0

  • SHA1

    fcab7503cc7b8ffbf57cd9d40ae649efe2ffa2a3

  • SHA256

    713fd6aeab19a3e414bc1ddeb497904cd67e9c2c308e354756e636fe96e1e0fd

  • SHA512

    00e0d4c4e9be384da644d6dadc31c412fcc6302319b01f27e15a607fee50c2c1cd9fa9a25c8ed03d7b676b8b0acfe693b18c6afeb3bc19ed6379a3b6970cba83

  • SSDEEP

    768:PJue1m2C5UZitgYBZxlRo+bAsbHkQ25dK4OaM23mRBrUfjO:Pce1m2CbgWZxfo+sWEQidHPHmRSfj

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e9bc8c83df1a740d422fc35fae579a0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections