Overview

overview

10

Static

static

10

54f6c0a06e...18.dll

windows7-x64

10

54f6c0a06e...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    54f6c0a06e34410976f8c9ef1a56172f_JaffaCakes118

  • Size

    69KB

  • MD5

    54f6c0a06e34410976f8c9ef1a56172f

  • SHA1

    2aa964754b7135a5d9d4071153d280d04a50a940

  • SHA256

    92d37888415395f6df9c59c4f8c4604abed63bd4591a1ebd9a764ec79979c4c3

  • SHA512

    ab272faeabaef23a3f5f5c05635884130eadb324718de99888f9bb14e12cd0e135f4ac4978c96bea3f230fdc60b9b3fc57cb6dd80ef52e2470f2aab6a27ec7bc

  • SSDEEP

    1536:YYrJc9PSf8tSjetQhGkUKJcwRNX/kByeP1B:YYrJiPk8tSwowKvNX/kByw1B

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54f6c0a06e34410976f8c9ef1a56172f_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 6
  • a1
  • a2
  • tzzz2
  • y3
  • y4
  • z1
  • zzz2