Overview

overview

10

Static

static

10

JaffaCakes...54.exe

windows7-x64

JaffaCakes...54.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_95c7db2e2b95fc13388811fda6df48f5480d544106be62bb6431113ac6eb9b54

  • Size

    1.6MB

  • MD5

    178b8cae3d311c9d4fb4ff9ab84387a9

  • SHA1

    481bb21b236f3f6b486ead9dfafd1aefe5c9edcb

  • SHA256

    95c7db2e2b95fc13388811fda6df48f5480d544106be62bb6431113ac6eb9b54

  • SHA512

    fae0167cf77e87d7c46bff41e9e7928c01e82e7f46f8e5236b36e657c3698fe7f257223a70e215210ca540130a3f3b6c864679bdcbfa7149d7d657095e8f5373

  • SSDEEP

    12288:Udt56ehi/H9SDomjDBvMYojCmDu7b2ug:ciXLDmo

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167
Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_95c7db2e2b95fc13388811fda6df48f5480d544106be62bb6431113ac6eb9b54
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections