Overview

overview

10

Static

static

10

c3ac6788e7...18.exe

windows7-x64

10

c3ac6788e7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118

  • Size

    1.5MB

  • MD5

    c3ac6788e749c433eaf7cd17b0aee92e

  • SHA1

    58abb9cb9844d8248bab92901571e5069e9f655d

  • SHA256

    b68e6bf4696b566055d30a0ccdf35b784b725fe3d30dfce396612fc8058aace3

  • SHA512

    6e80a5d9a01dde067b5b367d7ed096b168f9f9513904dc35538767331a37c8524721c2d7958ebb33197051da747fbf65471dae34dd0e9675ae3338fd57a036b4

  • SSDEEP

    24576:Ib77WAYBBAEXsG0gj26ohW8jKXe54V+N9ntS/eve+cHE/se:ICAMsG0nlh5jt9cHE/

Score
10/10
trojanbazaloader

Malware Config

Signatures

  • Bazaloader family
    bazaloader
  • Detects BazaLoader malware 1 IoCs

    BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.

    trojan
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections