General

  • Target

    c1907214e8b1b8dd373ee4b5652b5f28_JaffaCakes118

  • Size

    7KB

  • MD5

    c1907214e8b1b8dd373ee4b5652b5f28

  • SHA1

    2001398740b75af17bb757a3d8edc2e623e7f21f

  • SHA256

    61fa21c4f1d716dd406241273bd1763af497d919b8008c53f4c85bbbb48d1b64

  • SHA512

    c020ae4335ff4b5d9b900c53eafe5133476bec8fbb942168d4ac23c0a02b911b1cc67c94390bd021f5e695015d308480401a984f188e1fbe9a4f8323e4f129b6

  • SSDEEP

    192:7TMxSEOtRipSyQvibXnFEUs613p64jVZJ0tLabcw:7TMOKprQ0Xrs61p64jV/gw

Score
10/10

Malware Config

Extracted

Family

purecrypter

C2

https://store2.gofile.io/download/fdd80845-961b-46c7-a15d-0aedbdce6384/Gxetichiqsm.dll

Signatures

  • Purecrypter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1907214e8b1b8dd373ee4b5652b5f28_JaffaCakes118
    .rar
  • IMG_RFQ70103260100057.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections