General

  • Target

    52519986219d2c9a808fb6dfe21f94e2_JaffaCakes118

  • Size

    204KB

  • MD5

    52519986219d2c9a808fb6dfe21f94e2

  • SHA1

    280a178c3a0d7d6ff12a5a17db2a4568507a8df1

  • SHA256

    fc2ead3fd5c28b9feaddb39d43d8e0b4ddcd6474ae2ef886fb4c61c44cd0ec45

  • SHA512

    fe2ea8b6d0e742cc2a69b95c8d04ca579ce83819f54c255d7eb8307a7e5b01b8d3625799417367c1ab618e0a7fa6e22a9a9f06a102d827ae14fb6b57d1997095

  • SSDEEP

    3072:7oUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHe1M+fwiWAoM:TGzRxSVtp0l6whGfsKR+zkBpTaa5tJH+

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52519986219d2c9a808fb6dfe21f94e2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections