General

  • Target

    d0f2bb1fe6d2d99b54373e6e473cfb1b_JaffaCakes118

  • Size

    112KB

  • MD5

    d0f2bb1fe6d2d99b54373e6e473cfb1b

  • SHA1

    aa7ff115ddcb0ddb0d7fcbed417672e38f1c2576

  • SHA256

    2afc3386cb8459f0916c19c85a9ca59e095568b671d194eb33970025624f33f0

  • SHA512

    fc4660527864fc4e7d14b74008a53236de28cf0b64b4a44dc1c7132284b86e85bdf6fdd32ef5fd0046b87adc086895cc8077ad194a499014dac71f4d377581e7

  • SSDEEP

    3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/gxg/:Zzx7ZApszolIo7lf/ipT/g

Score
10/10

Malware Config

Extracted

Family

azorult

C2

http://rbsystem.net/nginx/index.php

Signatures

  • Azorult family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0f2bb1fe6d2d99b54373e6e473cfb1b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections