Overview

overview

10

Static

static

10

002388a432...18.exe

windows7-x64

10

002388a432...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    002388a43281fe782dec84da93d765a3_JaffaCakes118

  • Size

    2.7MB

  • MD5

    002388a43281fe782dec84da93d765a3

  • SHA1

    93c0d1a2b3a5ee02f3850e7fba9d0ef4dab892ca

  • SHA256

    eb591a1b5bc92a6f395a3e8bf72d2cac924529757eefd68c49a0106f716814b5

  • SHA512

    68d0c29c1ff2599efe581c66c24dd15e186a238d160a8e4d964244216a20917425d2e26753a896a638cf0f904196bc5ae8a2028d593087d23c87b7d5b4c7caaf

  • SSDEEP

    24576:ssF6mZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH81b:fF6mw4gxeOw46fUbNecCCFbNecF

Score
10/10
ratupxwarzonerat

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 002388a43281fe782dec84da93d765a3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections