Overview

overview

10

Static

static

10

06469f1dfa...18.exe

windows7-x64

10

06469f1dfa...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06469f1dfa36a5a89dcc89f91a29bd8e_JaffaCakes118

  • Size

    1.2MB

  • MD5

    06469f1dfa36a5a89dcc89f91a29bd8e

  • SHA1

    ef939b6c6cfb982eca486aa9a969bfa1ee52b6f4

  • SHA256

    f07703fb7ca4f0bc3c64bbd0b4d79e73530542675044a5e65c2845557564fd24

  • SHA512

    a4eb29df100ef06cd4139e749df10ed98cdd782b082ed7b2722821b4fa71d2510f224cea05bde05f69edfcc489c8f7199e659c5351e7b3a65e88a92c85cd2bfc

  • SSDEEP

    12288:OIbsBDU0I6+Tu0TJ0N1oYgNOFDA7W2FeDSIGVH/KIDgDgUeHbY11kY:OIbGD2JTu0GoZQDbGV6eH81kY

Score
10/10
rataspackv2warzonerat

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06469f1dfa36a5a89dcc89f91a29bd8e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections