General

  • Target

    85efbbd9244db86c7fd1f8414724d6f9_JaffaCakes118

  • Size

    552KB

  • MD5

    85efbbd9244db86c7fd1f8414724d6f9

  • SHA1

    124179c4c6799c497e22d8e50b242c850b6d03a2

  • SHA256

    699a6aac01b01c35c3c5da0825339fbf481ce2d39fd4546dc99eda9729954ca3

  • SHA512

    c94fbf6812149e361531b710867050ca55b22432df61860351b8dc4602acf8e0af7ba4592afc7e155c7e75b4545defcc3eaf05ed5c89795a6cbd67b74c57614e

  • SSDEEP

    12288:k9rD+H23OO3n/LpPxM35B9qgObN8F6qlfNUqIFzGRIF6nj1K20XdDixi8B7xDFC6:irDF3ln/Llib0J2

Malware Config

Extracted

Family

hawkeye_reborn

Attributes
  • fields

  • name

Signatures

  • Hawkeye_reborn family
  • M00nD3v Logger payload 1 IoCs

    Detects M00nD3v Logger payload in memory.

  • M00nd3v_logger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85efbbd9244db86c7fd1f8414724d6f9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections