Errors

Reason
config extraction: sodinokibi: invalid character 'Ù' looking for beginning of value

General

  • Target

    c68188c256ab51df7d8804d7a105c505_JaffaCakes118

  • Size

    316KB

  • MD5

    c68188c256ab51df7d8804d7a105c505

  • SHA1

    d2395b730b7615e928c943bfa2eedbee5787bdc3

  • SHA256

    4ab2ffad7fb7d386894a2eefc22cc686bfc9cdac38d2b530d3aefe6eb60c206c

  • SHA512

    6b832c1f3d1fbe5db4c52eaf6835567c4bfa73af14344c3c3bbb43a48d2736d508af47fadbb6e815e99e47406e0335052695f74a81184e20351bd6b965e45202

  • SSDEEP

    6144:ffYWAw9fORH/2+bGqUT8HcmQn2ikMpvGUdmwIXo+M9VQHDQyspAkLKMxt:fHJ9fOJ4F23MpvGUNuMXQ8ysHXt

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Sodinokibi/Revil sample 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c68188c256ab51df7d8804d7a105c505_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections