General

  • Target

    JaffaCakes118_60724e60e43f65c70227c44fb3603741

  • Size

    385KB

  • MD5

    60724e60e43f65c70227c44fb3603741

  • SHA1

    144ba24e082c2c920fb5c601790143f25523d909

  • SHA256

    b88bace4e5a1b4b7f0a4d944b30f0248dd71873e0a8aaf339699d402856856e9

  • SHA512

    bee650546ef9bb8bbde2c8d89eb0f3039344911045d9ee611a0ca4eddabbac3291a0b4f93c8f0db32b99deee208afaad0feddb27cec1c98c9e688d9236d8b476

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHYt4Z4q:Dt0VPFfsKAkrbPlYG+q

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_60724e60e43f65c70227c44fb3603741
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections