General

  • Target

    JaffaCakes118_5688f5c8046aaa5b9c4f0e1d71e6e78b

  • Size

    148KB

  • MD5

    5688f5c8046aaa5b9c4f0e1d71e6e78b

  • SHA1

    13cb3470c8469063c54fc763960cc97d73a8ffcf

  • SHA256

    2f0d3ddfc455c78def12192e6b9708562a2640a4e19096411552d2c1ab2222f2

  • SHA512

    2019900d341d5256a9fbb74c2652e2100266b743192ad568258e98f16a77b147a7b13f0a8670a9998edf09889fc9aa024e66356baa2a6f79d6a91907c07dd279

  • SSDEEP

    3072:dcOqt/4opDQkdDIdlyA06726bwtTBftIihnk:dcOqnJcJ06q6bwtTBl3hn

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5688f5c8046aaa5b9c4f0e1d71e6e78b
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd7a44a02a3c244f17a4eb1a2a24ccbe


    Headers

    Imports

    Exports

    Sections