Overview

overview

10

Static

static

10

JaffaCakes...3a.exe

windows7-x64

JaffaCakes...3a.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e255fc36b146a6282a0a86a6844640a743c82d9cd11a6d678016f2518b95043a

  • Size

    1.6MB

  • MD5

    5cdf1ce1219db59d218bc4b2dea686b0

  • SHA1

    ea48cbe690a2eee246275533800384b67ce30583

  • SHA256

    e255fc36b146a6282a0a86a6844640a743c82d9cd11a6d678016f2518b95043a

  • SHA512

    7d4c4eb2e4d5c8cf21b898d5f4645804156096e57c66ea2b1dd02aa9a0c08d71caf9b9111d27710e3f76e3f60985e26902d4faf897a445314192c0e2fef88273

  • SSDEEP

    12288:Udt56ehi/H9SDomjDBvMYojCmDu7BTgF:ciXLDx

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167
Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e255fc36b146a6282a0a86a6844640a743c82d9cd11a6d678016f2518b95043a
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections