Overview

overview

10

Static

static

10

JaffaCakes...9b.exe

windows7-x64

JaffaCakes...9b.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ad2201fbd0a8dd3b170a44c56bcd829a390264859fb05871b2a68b6dabc2249b

  • Size

    424KB

  • MD5

    cb5b6542cf40fd36c524c7ee8f4139ec

  • SHA1

    70a3cf7644e70c10c04f40be050221406631abbc

  • SHA256

    ad2201fbd0a8dd3b170a44c56bcd829a390264859fb05871b2a68b6dabc2249b

  • SHA512

    aef911f2842ec6b76c3cefc50e57ba8173a1091739500697be2c9c9bc33f0597f2185b2ce51dfb27d49455cbe4660f9d091107a9c80250405360bccbe3b13afe

  • SSDEEP

    12288:Udt56ehi/H9SDomjDBvMYojCmDu7hTgKzi:ciXLDdKzi

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167
Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ad2201fbd0a8dd3b170a44c56bcd829a390264859fb05871b2a68b6dabc2249b
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections