Overview

overview

10

Static

static

10

b0d08e4ee2...18.exe

windows7-x64

10

b0d08e4ee2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0d08e4ee2a958c8e69e78c0ed6fe068_JaffaCakes118

  • Size

    187KB

  • MD5

    b0d08e4ee2a958c8e69e78c0ed6fe068

  • SHA1

    aaa6bd7d04e5de7f3c21f90de1f0a8de22ab6446

  • SHA256

    624fa3daa42ba4f5e7302c2ce0909f76eb68e9c9717690698b0d902ebbd7a2ab

  • SHA512

    f4f1b43c606fa2b862364da57a25a11f3efa808d7838e6fe23fdb50c8e2c71ff7d193f75aca194eaff696fcc6ceae7e2798f561b74936681c83b9ae08670dc5c

  • SSDEEP

    3072:UR8Lk17GNK1hnz3lOOEZtcO5tonqoe7p52wGi00I112oqkPmvFSZBibTGHI:Uv1SNKnnzylXsSdxGLt12KkFSZBUTGHI

Score
10/10
isfbgh0stratgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0d08e4ee2a958c8e69e78c0ed6fe068_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    ab7ec964fc16785964e3db09edf1476e


    Headers

    Imports

    Sections