General
-
Target
JaffaCakes118_32c42e300f016a94ab442d48ba43d99a98d518f06154d9d18683506b1193b7a9
-
Size
41.8MB
-
MD5
21f1ed041d93b63c69c35a4cc8768310
-
SHA1
52e5ef0e905eebf0adf1af853577b16b8e8b6937
-
SHA256
32c42e300f016a94ab442d48ba43d99a98d518f06154d9d18683506b1193b7a9
-
SHA512
7b823a4d9a423dd97f85a24bade43bbc4fdfb3d023d01e5bdb372fe38eeed4c69ca597a3b902991cca9d6dbbfecb06be10a1985f480401ebabb16242be729b2a
-
SSDEEP
6144:PKMOAd7IF9Zr3Tz5s1BOzCtUy020kkj2peKAO6YJi/ZamWR1c5LvlvM:SMOAd7IbZr3Tz58BOzOMKFOZ5Wm7
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
37.0.8.39
31.210.20.149
212.192.241.16
Attributes
-
url_path
/software.php
/software.php
Signatures
-
Gcleaner family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_32c42e300f016a94ab442d48ba43d99a98d518f06154d9d18683506b1193b7a9
Headers
Sections