Overview

overview

7

Static

static

7

6f24a667a7...18.exe

windows7-x64

7

6f24a667a7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f24a667a7ffab78b44d383b77207a43_JaffaCakes118

  • Size

    1.3MB

  • MD5

    6f24a667a7ffab78b44d383b77207a43

  • SHA1

    85a3f4d3c087f8bf6e54d9476925868c350d3278

  • SHA256

    195e7b0c95387714c2a1c1c7add9f359499c592e4f8ed599b5de341053761927

  • SHA512

    0164a596c802dfa1c987123a51548b2530c7ab2ad19821ea0577d742e545b63b481095941dfd3638299ef8426b92eefc52fd2a12af41619c49f43a23344746c2

  • SSDEEP

    24576:cZ4R1mPShMIqtu/ZfPb5Qel3IYsrPq05HGlRq+ZNn5V4cNON6qnVKAoyzIcXoo:cKxbnl3glH6PXcZVNo6IFo

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f24a667a7ffab78b44d383b77207a43_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections