General

  • Target

    JaffaCakes118_5a8dbd1456eee96a03fcdf8f733bc564

  • Size

    166KB

  • MD5

    5a8dbd1456eee96a03fcdf8f733bc564

  • SHA1

    a2b604ba9c12bd47f3af6a73a03b1d20a83a23ae

  • SHA256

    498d031cb238850a5c59137c1061563ac3bd2cb972d18dbb05486385005eeb89

  • SHA512

    06d80eb32de586b28522488a99db7ab22c920f00befd00709de9ac2e01ea2e4f02eabd62797a5f8eefbe340a6004786d43fc76b1ff778f3a09d47c6a3379ed9d

  • SSDEEP

    1536:G95j8StJ2PAM8u+WEpycIssfircnLKf797JOkK0QPBO5XFs:Q5jbJ9pyjsOirc+p7JOkK0QPBOrs

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5a8dbd1456eee96a03fcdf8f733bc564
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections