Overview

overview

10

Static

static

10

f782fa626b...18.dll

windows7-x64

3

f782fa626b...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f782fa626b0c53d9cca2fbb29a65f23f_JaffaCakes118

  • Size

    160KB

  • MD5

    f782fa626b0c53d9cca2fbb29a65f23f

  • SHA1

    9fabc6c255ea94262b6339e4b5949174afd30114

  • SHA256

    2f58a869711d2b28e6ecaac25cc2166daa46f7adfb719b7dd334e01c1474ca9b

  • SHA512

    2d023aa899d5025631534489c6a13de071113f36ae2ab32d53c833c749d262019f3c3bd7961f2da12753e389bab92f4bda429662dec77552a13c825258af9e18

  • SSDEEP

    3072:SXZC1fhEIosP/HMP7kUj6IXE6i1xRqLCJVQPyR:uC1fWIpP/H67kU+I06i1DB

Score
10/10
plugx

Malware Config

Extracted

Family

plugx

C2

103.192.226.100:80

103.192.226.100:110

103.192.226.100:8080
Mutex

QnorYnelDPFKdmGxBhbM

Attributes
  • folder

    AvastSvccFE

Signatures

  • Plugx family
    plugx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f782fa626b0c53d9cca2fbb29a65f23f_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    397051b6d9c5c8b855041d0a2769af43


    Headers

    Imports

    Exports

    Sections