Overview

overview

10

Static

static

10

055d617aa8...18.exe

windows7-x64

10

055d617aa8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    055d617aa827bd441e33ceadc18f5687_JaffaCakes118

  • Size

    1.2MB

  • MD5

    055d617aa827bd441e33ceadc18f5687

  • SHA1

    d30481c575d3f9da2d4fec41f55b708502d8ee7f

  • SHA256

    b1353d84975a78a2e39986f4c0b46116d9342aa99f13450acc5ea83d751dbb9c

  • SHA512

    cdff906a01dc5e603ce63473f7eeb8b065c13f191b018a5ac4f2a00ad3d517d19dcb8fc53797890583f3215793515c06eecb5a0c11bb8fa71fe8509f9077a842

  • SSDEEP

    12288:GIbsBDU0I6+Tu0TJ0N1oYgeOF5A7W2FeDSIGVH/KIDgDgUeHbY1tk3:GIbGD2JTu0GoWQDbGV6eH8tk3

Score
10/10
rataspackv2warzonerat

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 055d617aa827bd441e33ceadc18f5687_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections