General

  • Target

    ef81a01e614a3a7c7a06171e8ec463b6_JaffaCakes118

  • Size

    135KB

  • MD5

    ef81a01e614a3a7c7a06171e8ec463b6

  • SHA1

    499cceeeb6485b34233b85fdbd5e26397423f0a7

  • SHA256

    4c889f5fdffe7b6145b59232c1da5966bdeb57b6d21f38eebe12015903d456f6

  • SHA512

    62f6dfe15b5b84ee773d0981de5a73734baeb8d7c6407959736387bed9e5655abfc62bc1febe67e6ea5176365ec0f8f8212cf177a4680c9236bf39cd546db9cd

  • SSDEEP

    1536:fS0nQkNkx7AeJRhNUoCthFYJmw44uh9nVJUWlDYnyrCo5CqydiEz1t4PpZnM+zgV:zNelNEvKWZYKika1t4PpZ/bVn7Ch

Score
10/10

Malware Config

Extracted

Family

plugx

C2

www.manager2013.com:80

www.manager2013.com:443

www.manager2013.com:53

Mutex

GyxtYRhpMZuxEYphctSz

Attributes
  • folder

    AAM UpdatesuyA

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef81a01e614a3a7c7a06171e8ec463b6_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    75c054ac1bbae1f166a73824a11d5efa


    Headers

    Imports

    Exports

    Sections