General

  • Target

    74668e84ee38695216ef737f389dc55c_JaffaCakes118

  • Size

    135KB

  • MD5

    74668e84ee38695216ef737f389dc55c

  • SHA1

    e4d6928f6592a2a38d880cff7e0f30db2a15896e

  • SHA256

    befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6

  • SHA512

    90a550498a77284e5a936d92513994976ed5b67ffd8f5ca1476570f1c7307f69ed8400e86ab2588d24c77df66279daca98e4735b1b650cf46770093a7d1b8c24

  • SSDEEP

    1536:fS0nQkNkx7AeJRhNUoCthFYJmw44uh9nVJUWlDYnyrCo5CqydiEz1t4PpZnM+zgT:zNelNEvKWZYKika1t4PpZ/bVn7CX

Score
10/10

Malware Config

Extracted

Family

plugx

C2

rainydaysweb.com:80

rainydaysweb.com:443

rainydaysweb.com:53

Mutex

dhHRYvLNaOVJXZdDsbdc

Attributes
  • folder

    AAM UpdatesblF

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 74668e84ee38695216ef737f389dc55c_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    75c054ac1bbae1f166a73824a11d5efa


    Headers

    Imports

    Exports

    Sections