Overview

overview

10

Static

static

10

sample.exe

windows7-x64

sample.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6af5e7216f952a8a77091c14149a40432dd434f46e94a70a99d4e704f9d67545

  • Size

    70KB

  • MD5

    350ae93b57d8571970e37441ac1107bc

  • SHA1

    3c7e874342e2a07c89bec0090ec64779d09c7eba

  • SHA256

    6af5e7216f952a8a77091c14149a40432dd434f46e94a70a99d4e704f9d67545

  • SHA512

    8ab9950ed0962727fefadf4e61c7f63ed37de321d9f6eab622dbd7a0fedbc15e02ea842cbf0dc9d6a7f15728ef805c1168666dc46ddb1a7096e425195d17d83a

  • SSDEEP

    1536:1JS+qT+OcTwuGTMKEbii4L/khMICS4Av5GbF+p:fPYVEb5nBGF+p

Score
10/10
sodinokibi

Malware Config

Signatures

  • Sodinokibi family
    sodinokibi
  • Sodinokibi/Revil sample 2 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6af5e7216f952a8a77091c14149a40432dd434f46e94a70a99d4e704f9d67545
    .gz
  • sample
    .exe windows:5 windows x86 arch:x86

    b9fbfd5ee5998f0b78b98abff421ebd4


    Headers

    Imports

    Sections