General

  • Target

    17af710193e1570d2a161243a7f09ad3_JaffaCakes118

  • Size

    386KB

  • MD5

    17af710193e1570d2a161243a7f09ad3

  • SHA1

    bbe48f327480d04cfb1851f8dd66517774d86ac6

  • SHA256

    409726bc69395c3cf5381e9fcde1a4159eb6674da32efac8ad87120e17e8c2f7

  • SHA512

    b5526dbe2ba29a39d73ead166b8f1c418e2d6cee447c087da3c0a9a01a9be758c13a67bebb86f0fab9978e8fdf8ef5bf39c43963b698f195fe875f2829bcb83f

  • SSDEEP

    3072:N17/yrBe0HCa5iwY6k3+OAAKhH8x146Vzm2TceHvBdqdfqcmPnlGZGepv8C:77/yOjutH8xe6NmZOC9a

Score
9/10

Malware Config

Signatures

  • Beds Protector Packer 1 IoCs

    Detects Beds Protector packer used to load .NET malware.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17af710193e1570d2a161243a7f09ad3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections