General

  • Target

    JaffaCakes118_55d6f2735df949e7e1aefc86999cdec1

  • Size

    156KB

  • MD5

    55d6f2735df949e7e1aefc86999cdec1

  • SHA1

    f0b9edb46b19ef05790833de5fffee1fbec4a4b0

  • SHA256

    73a01dabbb548cba3555597bf7d226047e43a6f28e32250e5ac22e2795cdf93e

  • SHA512

    4e2b32d30ac8f412b00f9893619093bf666fe65c0dede3ec35be6d93f0c6c30c12c1796793d08abeed2b15d388702b935947d97a54c25b152e3c6611ff8b5f59

  • SSDEEP

    3072:/wHeSMoBZNhLR3ZqnQBpO3bP94xiqg+o9UzMte4ZiGkh:/wRBRpqncp+B4gn+oezMzcGkh

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_55d6f2735df949e7e1aefc86999cdec1
    .exe windows:4 windows x86 arch:x86

    1674d13ce81cd3cc773e73bf89843898


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/CPP/102
  • .rsrc/GROUP_ICON/116
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/string.txt
  • .rsrc/version.txt
  • .text