General

  • Target

    94816cf73bf23df93e5231a4884c46b9_JaffaCakes118

  • Size

    5.1MB

  • MD5

    94816cf73bf23df93e5231a4884c46b9

  • SHA1

    6418aaf73588ab0097bace459af5765cb5eeac5b

  • SHA256

    cc163748b9a819004c8b4bb890bb1502ce4144d2ca4314607ee61ad542c336f7

  • SHA512

    aa922b2bce737e2c8416a5795cd4976f15039ced91c0c0ad5be9b533ea4742102e7f21fe2cf9a141992c214ea5228d9de4dfa9befcb93e47754752d1f46158c0

  • SSDEEP

    49152:ol/ijN5j2Xsl3RJ3LHobUQDgok30nJOyCPO78rHtHReH+YcMNqCUBMBPOyCPOShw:olerjesRJ8YQU/oEPO78b5I1W+6POZ

Malware Config

Signatures

  • Darkcomet family
  • Detect Neshta payload 1 IoCs
  • Neshta family
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94816cf73bf23df93e5231a4884c46b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections