General

  • Target

    8a63c557e22f04951cc3be481916ed46_JaffaCakes118

  • Size

    1.3MB

  • MD5

    8a63c557e22f04951cc3be481916ed46

  • SHA1

    69445fd3050666003eab6ae98ed3521f2e48ea02

  • SHA256

    9aa7a5176e797d8d33d5f5f95e1506dcfa4af6be639f129c48c684c1cb1f4ef9

  • SHA512

    849c8c3dba086c4ff2cd12d4bd73dc5ebd54a6caecf6159a37795a58b333847461fc93ddc545e4bac4dbd1d2fb5c24b35a7aa61d5d76d1af10a1005ff9f47544

  • SSDEEP

    24576:ku20QVqu6Sn1o9HEZZi+MRkyZvmGoaYDz+gTQ3PGo3sItA+Ua5gZo/qdWx1jgZYv:t20Qx7oyo+MtlYDzRpW/qdhZYqju

Score
10/10

Malware Config

Extracted

Family

ffdroider

C2

http://101.36.107.74

Signatures

  • Ffdroider family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a63c557e22f04951cc3be481916ed46_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    31972de245a7d2a397511c35d0aeda34


    Headers

    Imports

    Sections