Overview

overview

10

Static

static

10

PES2012_Ba...gs.exe

windows7-x64

10

PES2012_Ba...gs.exe

windows10-2004-x64

10

PES2012_Ba...pt.dll

windows7-x64

3

PES2012_Ba...pt.dll

windows10-2004-x64

3

�...ru.url

windows7-x64

1

�...ru.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9fca597e6a74f20e60362c17ba0bd711_JaffaCakes118

  • Size

    138KB

  • MD5

    9fca597e6a74f20e60362c17ba0bd711

  • SHA1

    4716cd9aba20d1439552f2c0682f1c417a0fcfa3

  • SHA256

    c2ed0718c538ee961eba9a459990bf8e931c4ea49d4933e83dbe583d0cff5690

  • SHA512

    445718d2e29259ff31bb26b4ed522f7b649110f1f9e9356f9b1e37661249d5da0dfc86c66ad40eb9d1d6178e69dd773f859fda001caa158b8b50ed3a0b628f04

  • SSDEEP

    3072:8Kn1xQAQBtVgGNunMFkU9JrH3g6W8wkcFhQ0/BhQpZClJ/aReMYjuMkWKtc:qAQBrgsW1OJrw6g1l/8pZ0EReD6VWK2

Score
10/10
neshta

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fca597e6a74f20e60362c17ba0bd711_JaffaCakes118
    .zip
  • PES2012_BaL_Money.7z
    .7z
  • PES2012_BaL_Money/BaLSettings.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PES2012_BaL_Money/decrypt.dll
    .dll windows:4 windows x86 arch:x86

    7531d4e682ab1c0a110d5b4925a4b76e


    Headers

    Imports

    Exports

    Sections

  •  ᪠砭  ᠩ PlayGround.ru.url
    .url