Overview

overview

10

Static

static

10

JaffaCakes...2b.exe

windows7-x64

10

JaffaCakes...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7878b17e770f5552466fd84445a023568d989bf528008c7d271e7c0c84ce512b

  • Size

    467KB

  • MD5

    cccd455e7f04b4c5db45af8a3b85bac8

  • SHA1

    4c56a69f98b1b6c439de4e4f76c908f22a47f8e6

  • SHA256

    7878b17e770f5552466fd84445a023568d989bf528008c7d271e7c0c84ce512b

  • SHA512

    1734cae2ac934acd72ec38ad79f00187229ed64d1f2edd111010f82d397c07c3f9f549cbb9c61b316d2de392982c37c7dee31d95f361fd10bf92484d10e22d0c

  • SSDEEP

    12288:X7CfVySdiKUsNpyxGH6EdEQvrRuQ9/mG031ign8bxxW0OLWmJ:X7W5diKtA+/CYrRuQ9/l4Axc+m

Score
10/10
blustealer

Malware Config

Extracted

Family

blustealer

Credentials

  • Protocol:     smtp
  • Host:
    mail.dm-teh.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Vm@(O;CO.vEQ

Signatures

  • Blustealer family
    blustealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7878b17e770f5552466fd84445a023568d989bf528008c7d271e7c0c84ce512b
    .exe windows:4 windows x86 arch:x86

    6ec320695a6a58a7ee41d2f9e8a4623c


    Headers

    Imports

    Sections