General

  • Target

    0cf0c460ea16773e2fd900d2e8fc9a40_JaffaCakes118

  • Size

    73KB

  • MD5

    0cf0c460ea16773e2fd900d2e8fc9a40

  • SHA1

    2024aca5ee6fa29d47f694619133bfc524289411

  • SHA256

    f390f529d708044307558c0c6207403f6342773297dde59dbfa583ace214abfa

  • SHA512

    5d270fa015f89285fc8d83788f33a43a565b6ac3ccc788fcda9e37c5c029bdec19a41a709e4cf544ba5e8b77dc266e947c7a79ce198869d514a39025a470deb0

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cf0c460ea16773e2fd900d2e8fc9a40_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections