Overview

overview

10

Static

static

10

120bd96623...18.exe

windows7-x64

10

120bd96623...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    120bd9662383e841ff6cf5add7437ea9_JaffaCakes118

  • Size

    1.2MB

  • MD5

    120bd9662383e841ff6cf5add7437ea9

  • SHA1

    134bd08efd898b209d53ad830ee2ae6aa0857993

  • SHA256

    858dadb7553a765316332a41a076c0e029e4cf166bb8f8c67236932acd690e15

  • SHA512

    6a5ed4693426cd6a5370b5ec0f96f67bde7775321654d5fd4306854c6d5ee5cf8fd4d7db9ad2331f0ebc132769fa65ae0ce8518010ed922c8aaab29f4aae37a8

  • SSDEEP

    12288:OIbsBDU0I6+Tu0TJ0N1oYgNOFDA7W2FeDSIGVH/KIDgDgUeHbY11kd:OIbGD2JTu0GoZQDbGV6eH81kd

Score
10/10
rataspackv2warzonerat

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 120bd9662383e841ff6cf5add7437ea9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections