General

  • Target

    f81c4b71818f1522f4340c48cc201852_JaffaCakes118

  • Size

    187KB

  • MD5

    f81c4b71818f1522f4340c48cc201852

  • SHA1

    842df1597258b190e961a5b5ab6dd33213c6e7d5

  • SHA256

    2f10663fce514ab932407953bf65fc13b70ee06ef5b07f25e060603a0a5a596d

  • SHA512

    f03b6b48f820adb9c985c34a060e6fbe17911e7154f7664207f0695f3d62bac267c502a3f33bab73ed13298da8d6bc7de6e848d92016fe8325f82234834b9bb1

  • SSDEEP

    3072:dXcFrvtf6Kn1Fmc+Pqz9vabrkSkDEExjTkSwwPIEWBfuTk:dXcFrvtf6S1wOIP023u

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f81c4b71818f1522f4340c48cc201852_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections