General

  • Target

    23e2e231d941268aa54c5dbe465506e4_JaffaCakes118

  • Size

    219KB

  • MD5

    23e2e231d941268aa54c5dbe465506e4

  • SHA1

    7d7508cebe74f05abe64f46fdd74c8f7a2130c53

  • SHA256

    329c2d67530a45ae10a9f029079002e63b8d4b047ebfce81c089b36ad63b4915

  • SHA512

    fff902956992c68f2db01b5ed24802790834abae0aeb445e417144b54002887b8d132f083fd47239293fe858e239d1154f262e909ff8bba83ff0539f7a0d297d

  • SSDEEP

    3072:sr85CgsKdFiWjmfb+HP+rnRfUSFDnalgugo4sRGsFHfl:k9gNHjmfCHWtUUigVsTpl

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Sodinokibi family
  • Sodinokibi/Revil sample 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23e2e231d941268aa54c5dbe465506e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections