General

  • Target

    13ef71a0ea43c5880adb646286e8a188_JaffaCakes118

  • Size

    554KB

  • MD5

    13ef71a0ea43c5880adb646286e8a188

  • SHA1

    eeacd203f2b78a73651e8fa910ccbaf74fbd7c3e

  • SHA256

    c30c69a1fd660684b16bafd40b6e04bdad1dae1754609eb4e27ef5a55d8f2a84

  • SHA512

    7c93f964ba8f4f4dc27c97ed1544eae0ec0afff34112f632d0f3b9bec12c1a3c1b6188292d43f838c987dda73cc5764c79762858add5a6bb53985a24d106c984

  • SSDEEP

    12288:6fjpiI0Tt/ENBnEVE84Yep0ANUeYQ55bEQyeZ5nX3/2:apiI0ZssVhzAN5Ys5jyeZ5nu

Score
10/10

Malware Config

Extracted

Family

vidar

Version

7.7

Botnet

93

C2

http://search.ac.ug/

Attributes
  • profile_id

    93

Signatures

  • Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13ef71a0ea43c5880adb646286e8a188_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    d22f5941f55d15169abc4afa42f9b625


    Headers

    Imports

    Sections