General

  • Target

    JaffaCakes118_439dcf337368967bad207f5fbe19ba78

  • Size

    1.6MB

  • MD5

    439dcf337368967bad207f5fbe19ba78

  • SHA1

    b10169b737a3f871ffc565d797a2ac2886f53521

  • SHA256

    6f7efc65c75a33baa01aa723c32ea0a9a89397ba740fccce81f76cf429ae9efc

  • SHA512

    2f66d95d05cf417e3a7c2e012bbd129980230862905caff05d5757ec26c4cadb877275a9606c5ae570c641de632ae0e8a82110a45536a35fdbe43e0cfc92e1aa

  • SSDEEP

    49152:2TMqV4MqVZTMqV1TMqVkTMqVpTMqV8TMqVHTMqVJTMQ:UVwVxVtVGVBVOVDVh

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_439dcf337368967bad207f5fbe19ba78
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections