General

  • Target

    3714e45b6974602daa8c719b1a07e0f2_JaffaCakes118

  • Size

    392KB

  • MD5

    3714e45b6974602daa8c719b1a07e0f2

  • SHA1

    d863769c4499c91f2a4f12ff428c1e58f4364959

  • SHA256

    2479f9c82019ec43e9054688f092e52d062c9e7f260f47490b8d18efd2885bc8

  • SHA512

    a5b8157377a3147244ad659930ca5303f63f12d3caba514282e37231d79a87f94129e767202993c3d32eb47b0606704ea7a0de05d3a0489d8b3e9277c8b873e7

  • SSDEEP

    6144:M29qRfVSndj30B3wBxE1+ijiBKk3etdgI2MyzNORQtOfl1qNVo7R+S+N/TU7kn5l:0RfQn+w8EYiBlMkn5f9J105I

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3714e45b6974602daa8c719b1a07e0f2_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections