Overview

overview

10

Static

static

10

dcbbe53d87...18.exe

windows7-x64

10

dcbbe53d87...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcbbe53d87f77eb6c4906745936307ca_JaffaCakes118

  • Size

    92KB

  • MD5

    dcbbe53d87f77eb6c4906745936307ca

  • SHA1

    73adbe4ca8912fef8b9d7b7014bc37690f437f11

  • SHA256

    5d30ffaf927f0dac109a43b3059f7df8526573b341a32399304d0c81639991aa

  • SHA512

    9b44e520ef05e43a4ed38d2a5445770c1f1f5694e8f5a87c67b7994f791c023752d7222a7eedfc1049b390a45e3f574b9d8b46f77a1eaa98a3c060ed0aecb67f

  • SSDEEP

    1536:rQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+ees52z30rtru:c29DkEGRQixVSjLaes5G30Ba

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcbbe53d87f77eb6c4906745936307ca_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections