General
-
Target
c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118
-
Size
1.5MB
-
MD5
c3ac6788e749c433eaf7cd17b0aee92e
-
SHA1
58abb9cb9844d8248bab92901571e5069e9f655d
-
SHA256
b68e6bf4696b566055d30a0ccdf35b784b725fe3d30dfce396612fc8058aace3
-
SHA512
6e80a5d9a01dde067b5b367d7ed096b168f9f9513904dc35538767331a37c8524721c2d7958ebb33197051da747fbf65471dae34dd0e9675ae3338fd57a036b4
-
SSDEEP
24576:Ib77WAYBBAEXsG0gj26ohW8jKXe54V+N9ntS/eve+cHE/se:ICAMsG0nlh5jt9cHE/
Score
10/10
Malware Config
Signatures
-
Bazaloader family
-
Detects BazaLoader malware 1 IoCs
BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118
Headers
Sections