General

  • Target

    da41705c070ddbe50b4774857de19a74_JaffaCakes118

  • Size

    37KB

  • MD5

    da41705c070ddbe50b4774857de19a74

  • SHA1

    8871c7ce68dde674da05339f3a6d6d0eefb0bcb0

  • SHA256

    3c3a76b613083c05bb7db61c6b359870c2e90352076f2d32a9c96061494bab99

  • SHA512

    c1de464d1f2a3fb5bc95fb615f8909e8889383112691f10263d1bdf1aee94228c527d09caa195f6f40fe92e76cff0fb7eb679420390269e412f72143b0a30e9b

  • SSDEEP

    384:Fq1eBaNit5FbOn0aH2ykrqIPlZWz/EAYrAF+rMRTyN/0L+EcoinblneHQM3epzXw:E1/aNWtkrqIdQ7EprM+rMRa8NuBwt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

C2

79.140.166.40:22222

Mutex

af7a25d12a577183bc6b99084bac0e73

Attributes
  • reg_key

    af7a25d12a577183bc6b99084bac0e73

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da41705c070ddbe50b4774857de19a74_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections