General

  • Target

    51fca8b2f732adff580a39334d9e4393_JaffaCakes118

  • Size

    105KB

  • MD5

    51fca8b2f732adff580a39334d9e4393

  • SHA1

    a4eea737ac0f33fe4ff7615e28756b8c64f6c207

  • SHA256

    1efe654f4bf07de70f8b8224433b273ff0233db2e49e7200e5284af5accccd79

  • SHA512

    862218fa6f7af242dfc8bf3da2df81dd9d4c7778595ff594573492686a3d8e7475122f5aca903dd8bcb6dbd6a88a28b8162fa3925f6ebd3825c0bfb3a162951b

  • SSDEEP

    3072:gqVibRj1U9doMigzLe1aMLt17haeRriuemHC1r:gkibRG9dPigz60Y11Vriuex1r

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51fca8b2f732adff580a39334d9e4393_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    69fef0c905f45eab1ea2e1df93400a31


    Headers

    Imports

    Exports

    Sections