Overview

overview

10

Static

static

10

d96aa63f66...18.exe

windows7-x64

10

d96aa63f66...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d96aa63f661ba0d1719aafc01b97d847_JaffaCakes118

  • Size

    89KB

  • MD5

    d96aa63f661ba0d1719aafc01b97d847

  • SHA1

    033604b24d7833adb09118e940e0b52f593a9c87

  • SHA256

    bbf3a61bc1d6cad39086e2e07c94a1bdeb5b504619bed6c1fc4d819360e3e7a9

  • SHA512

    dd4ac0765b53dee5c193bf11e533a5418e86f26f0c6a0fd0c6ac323736a8f449b56999c357af633fd7691ae7c0c44496300d3b3c263aa5e13dc980760d47fcbd

  • SSDEEP

    1536:rQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+ees52z30rtrn:c29DkEGRQixVSjLaes5G30BL

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d96aa63f661ba0d1719aafc01b97d847_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections