Overview

overview

10

Static

static

10

454f29a352...18.exe

windows7-x64

10

454f29a352...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    454f29a3520ef9ec5d7b7ccd5c9781fe_JaffaCakes118

  • Size

    157KB

  • MD5

    454f29a3520ef9ec5d7b7ccd5c9781fe

  • SHA1

    185a05b2585ca576a04f20a0df18f0f99dc7ecd1

  • SHA256

    b3f50a66a478881e06db165518bd0cc5f8c116dd4a118c477a815250aafbf6a6

  • SHA512

    1bb3532a322993e4dfba3eb6b284b83c5d88e62c6c1782feaafe591427b07325aa84f82c2824823ccfbe4958e097f7bd3b8d267b1b186614e3b9662cd5a80b81

  • SSDEEP

    3072:foUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHj:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJHj

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 454f29a3520ef9ec5d7b7ccd5c9781fe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections