General

  • Target

    deb3ed21304ee52407a2628acaac4a78_JaffaCakes118

  • Size

    228KB

  • MD5

    deb3ed21304ee52407a2628acaac4a78

  • SHA1

    fe6efa7e67c276c361a85665e7b00c87d917008e

  • SHA256

    59bbcf7eccde56f7d927edbe19cbb7ae9e0e11e19645a10ba6f78747a4f0454a

  • SHA512

    c4bcf777b0bc6864c364d5aebcfa3e484cc5ae610508b5934a68c237f2b64392d3727976c0e5c2ed4175f39ff521a8b53d248dd8687a191a813088f67c9dccdb

  • SSDEEP

    6144:d4zpMILQBM0hdQaJONNuXBmIUxiXlJLtm8yZBv0gtTcos4QVB6ohAizQ:uzpMILQO0hdQaJONNuXBmIUxiXlm8yLj

Score
10/10

Malware Config

Signatures

  • Detects Talisman variant of PlugX 1 IoCs
  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deb3ed21304ee52407a2628acaac4a78_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    32e13bde2cbcd29e1511d455e72230fa


    Headers

    Imports

    Sections