General

  • Target

    f0c833dc15a9bc10e7e19b1012c6fc25_JaffaCakes118

  • Size

    525KB

  • MD5

    f0c833dc15a9bc10e7e19b1012c6fc25

  • SHA1

    f79168eb8abf94111120cd1a4e6a3e16832b63ef

  • SHA256

    ef705df70b8a1acaf9aa09f185050ea8839b2330cadc9a3d5053b750b2853cc0

  • SHA512

    be09bcbac482c9040e132523cfdf917540fb52fce2474c5808221e6107461599fad8ac4d4febf9792d66199575cdcf8fe96d5c9f791e12b5a16547aa2accca05

  • SSDEEP

    12288:IJL2VuzTenExgSbKZqfshnKuviuCNDIvDbx1ADITE:IJyVCm9kf80r

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0c833dc15a9bc10e7e19b1012c6fc25_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections