Overview

overview

10

Static

static

10

eae0fa92e7...18.exe

windows7-x64

10

eae0fa92e7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eae0fa92e74a4566e78399d8ee017e2b_JaffaCakes118

  • Size

    119KB

  • MD5

    eae0fa92e74a4566e78399d8ee017e2b

  • SHA1

    f699d16f6f0a6a8d57c5c399264bc43a4741d613

  • SHA256

    26f45280d814e994a261310864184c3cbed9737d3b609c8486674a91be56bc79

  • SHA512

    d855c0da83ff370beb850877fe769fec85877094da4311c2238f0da1b6bd155249a28e52dc799ab3849e4efdca689dee6e592434b565f8d1ca4bd393ecaea952

  • SSDEEP

    3072:R7HibvPPoCujRaRsUs1gEE29qA/2V4fOBvsMMOr:NHirLujRaRsU8gEE1A/2V4fOBvs/e

Score
10/10
sality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eae0fa92e74a4566e78399d8ee017e2b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections