Overview

overview

10

Static

static

10

04563f386e...18.exe

windows7-x64

10

04563f386e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04563f386e04b3d1bcada891c2ef091b_JaffaCakes118

  • Size

    89KB

  • MD5

    04563f386e04b3d1bcada891c2ef091b

  • SHA1

    2bbff963e56a7d4ed366b14207a8e78f90a88f54

  • SHA256

    f40ab2e2cb9cd887d53fb59b17ba0667d1ccaee0b02aa6965c26e555a73a27dc

  • SHA512

    ec02fcc84545085ca3c9e4a9fdc5ae0e8156950571b16a2fa4b6f88be822f051ff678d85422c9e4f36bb9cfd9c2a1e1584c9e7046f5541eb0b4a553fb3ba4023

  • SSDEEP

    768:LXcwt3tRpcnukmqa0cO5V6JB74eBzdVarqKUW2RvSUB/sb:LXcwFtRWuk4gGp/2

Score
10/10
btcnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

btc

C2

kanon.hopto.org:1177

Mutex

c9ae44b7fb83fd10071f633942205055

Attributes
  • reg_key

    c9ae44b7fb83fd10071f633942205055

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04563f386e04b3d1bcada891c2ef091b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections