Overview

overview

8

Static

static

7

28d48b5384...18.exe

windows7-x64

8

28d48b5384...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    28d48b5384311de90276296b9679db54_JaffaCakes118

  • Size

    347KB

  • MD5

    28d48b5384311de90276296b9679db54

  • SHA1

    2d9af644ba06056852dd271944c9c897ec6e1cb6

  • SHA256

    537fdbdf7a3b721366adb31aa5012e4056b2bcdcbe76e2dceccf61fdde17c0ec

  • SHA512

    9b60b21884bf59108b1ec438c4d15f082b16ffae684105c115804cbc7ad8e4937fe9d9eb4918b587a27920372d387dacb5c32085aa0b4688955f1b1030fd69d6

  • SSDEEP

    3072:2IrrabfNF91tltfcj120MD/w1KGL4U7B1bzS423p6zZvRej:lvabfNF91tltv0oojnSEdvg

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28d48b5384311de90276296b9679db54_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections