General

  • Target

    616aec438697710ff6d80cdccc7ed288_JaffaCakes118

  • Size

    32KB

  • MD5

    616aec438697710ff6d80cdccc7ed288

  • SHA1

    98c469571ef150b089e80b9646ac629325123f63

  • SHA256

    85c579676524a70d0e729aaf38042d5995141fca9715ae79240c9efbf9f375b9

  • SHA512

    d0776de2982b57f2838be8cfb2f8c31e34575108caad84057991e878dc080d2427d37285937bed318a6d53abc2a7923d9746d037ca476b7919fb9cb39cca508e

  • SSDEEP

    384:e0bUe5XB4e0XWObLPMqa50xtWTFztTUFQqzFHmObb1:PT9BuFPPMqOhulb1

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

62.108.37.42:5552

Mutex

5d7abe4e5f9f4b058

Attributes
  • reg_key

    5d7abe4e5f9f4b058

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 616aec438697710ff6d80cdccc7ed288_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections