Overview

overview

10

Static

static

10

295dbd5c02...18.exe

windows7-x64

10

295dbd5c02...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    295dbd5c02b779a369a63b92718d7aa2_JaffaCakes118

  • Size

    44KB

  • MD5

    295dbd5c02b779a369a63b92718d7aa2

  • SHA1

    be6dcbbc8bbd726b403c9e2239b73c63ba3af4b0

  • SHA256

    efb23906d867a80a01879d8d61a6cd97356e91ae6fa8c1e8c46fa7f477ad8c33

  • SHA512

    efcf734b34501c48e93e3170662ba70475a3c0b55d1b9d66438b77e8ebc563dd38e87cbfab685969273e15bbb5238c8bebef4a9b7d258b8fa2a2a44b50871ed9

  • SSDEEP

    768:nTvWCZkpLKvHRqAue48GFSM989SZwgptjFkPInV2J3rQdNRA6Z6IuzQ6xaf:T1keHRqmbG0M98932kGVqMdloQ6q

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 295dbd5c02b779a369a63b92718d7aa2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections