General

  • Target

    d79b92f1166eaef053315c94c8b24a4d_JaffaCakes118

  • Size

    107KB

  • MD5

    d79b92f1166eaef053315c94c8b24a4d

  • SHA1

    62d1612c4f9bbdb60324236f0083fa97c64530ae

  • SHA256

    f4a48f22b86d2f6d02f91a39c1bbb72bea98ab0495be8c3153392c8c8d44eb34

  • SHA512

    38fb3a4642d4357c8871f495b414829f3e58419da9249cba76135caba2e53742c9c305aff1bfb22666bce1c2ce8a20beb25115bd61d2faa773c10f00c49b23e6

  • SSDEEP

    3072:lSXHUiHV/0yf8DCHNVC7GXMUP5lfD7to91t4f6FsBhh0JS:lSX0G/0oqUP5/S1tLFsTh0JS

Score
10/10

Malware Config

Signatures

  • Parallax family
  • ParallaxRat payload 1 IoCs

    Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d79b92f1166eaef053315c94c8b24a4d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections