Overview

overview

7

Static

static

7

235d49678d...18.exe

windows7-x64

7

235d49678d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    235d49678d0ccd953b3b608d5a35e1c8_JaffaCakes118

  • Size

    85KB

  • MD5

    235d49678d0ccd953b3b608d5a35e1c8

  • SHA1

    8425f07788f6505a7756aa694afa77b60972b7ed

  • SHA256

    e6fa41192da240c066a7b127b8d5ad392a0b33376e75ef703a08f9c9360caded

  • SHA512

    aa79ecfc253ca793db3a21db951c94459f79944f05ba0378dfadd167bc04e7335c881fb4239c3fa45a9bee322ae62ae1789ab59df643286459fba01a44320292

  • SSDEEP

    1536:RvqGjMcs4X9fg1IgezMZwOR1J4RZ9lDeJjx3F9BV:RvqeMS9ffuZwCJC9laJjxr

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 235d49678d0ccd953b3b608d5a35e1c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections