General

  • Target

    d44061049f369ee9a1fd662d07089ebc_JaffaCakes118

  • Size

    912KB

  • MD5

    d44061049f369ee9a1fd662d07089ebc

  • SHA1

    49cea21c73f9737f589bb902d1a522e2754eaa86

  • SHA256

    388ff43a15d5094c7492af213e581133595439649099b1fefcba105deaac931d

  • SHA512

    0365975388a5764047e612af74815c226449f496dfeeca35e85eff8b32d30371505250ae3df82c5504f5298afe27f7b69d2faedbf8c657108c272ee34bcccdbf

  • SSDEEP

    12288:m3vmOuyM/T4x8aOFMUzj9unxEqSLNT1xVlvX7nWW5se2sQFLWIX9Y1+EddY+xUh:aGT65OF90xE1X97AaQFLn905vQ

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d44061049f369ee9a1fd662d07089ebc_JaffaCakes118
    .zip
  • Iron Harvest v1.0 Plus 14 Trainer.exe
    .exe windows:6 windows x64 arch:x64

    48256f48fb2d5021e9c5b9adb2156b62


    Headers

    Imports

    Sections