General

  • Target

    b2a3b074388a25d7198c239e5da526f3_JaffaCakes118

  • Size

    23KB

  • MD5

    b2a3b074388a25d7198c239e5da526f3

  • SHA1

    d4e1bffb0a87ed7af5f7e4ac3761809d1240dfef

  • SHA256

    b978d406d6f90daed653f76d38f6a44b4a0b688d52c806eb7940d75e85887593

  • SHA512

    02f0ec762ec874419f762b25a6989576fd378c4ee1fdf9e2376099e4cdd1228ddf8edbe48d937a07816170dfc6032d745a436f2384e0a0ebbb7b39c38c667705

  • SSDEEP

    384:0cqbCK0l4h7o9SVyDGvENuh46/gJkOmMSW38mRvR6JZlbw8hqIusZzZ7j:j30py6vhxaRpcnus

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

cd9d93aa50052815b78bcf25e70d00d4

Attributes
  • reg_key

    cd9d93aa50052815b78bcf25e70d00d4

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2a3b074388a25d7198c239e5da526f3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections