Overview

overview

10

Static

static

10

JaffaCakes...aa.dll

windows7-x64

3

JaffaCakes...aa.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

  • Size

    56KB

  • MD5

    b8e4f38650912b7986118c969417d288

  • SHA1

    6eb34613fdd59ed06130ed5011f5dcaa6a9e3341

  • SHA256

    a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

  • SHA512

    a0c2f037cd9f4c78e5e2865efdffea6ba0d9892c04f73f70d2d77c7e51130c139ee4701ae2731ba7676959e96f896610633f59d68df34505c8d94ef453fa0d2d

  • SSDEEP

    768:EqY2TDU+Jx38vVey5eb8EvnVBosnO1T2VOYcV0HRoJvv5E:EqYs7X3B2eblt6T2VOcihv

Score
10/10
isfb7625gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7625

C2

sistemliner.top

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections