Overview

overview

10

Static

static

10

JaffaCakes...92.exe

windows7-x64

JaffaCakes...92.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_fe949027c28bdf3ee03c2230245fb3e411e252ce92845822f27c62373ae6b092

  • Size

    1.6MB

  • MD5

    185cca20c5bf50f70c4cd0e738e89f2f

  • SHA1

    43e1296b1a1617b68ce9d9b0ca03b3c645f9f074

  • SHA256

    fe949027c28bdf3ee03c2230245fb3e411e252ce92845822f27c62373ae6b092

  • SHA512

    d3af1634cc52b0ff7f9586689351556b2951921004fe92ef268ea861effdfb1ab257606245c89712de21757b5cd63088ccb6942086aef73ef163ea5271828bdf

  • SSDEEP

    6144:Udt56eh8ITcleMH9SDomjDBvMYos+CmDyZYIMsCIxl0J8kOMAODeXg:Udt56ehi/H9SDomjDBvMYojCmDu7Mog

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167
Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_fe949027c28bdf3ee03c2230245fb3e411e252ce92845822f27c62373ae6b092
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections