General

  • Target

    JaffaCakes118_2705d06f3192137a747e9519317e058acfa8b5a9a11b8bbc7b8a46876bebacef

  • Size

    1.6MB

  • MD5

    2c30fb7f3c49cad84e3efe2c3b80b042

  • SHA1

    ad6072508495806a6a9942c434f707e0d53a7a86

  • SHA256

    2705d06f3192137a747e9519317e058acfa8b5a9a11b8bbc7b8a46876bebacef

  • SHA512

    83906e7eb5b7d331f060c2e32ace90b498a92335f1e1600543e0b93609cf52b81c2324c27c479dc447a7d0883f4958fe207c2981492dbd5522a5511612a477a7

  • SSDEEP

    6144:Udt56eh8ITcleMH9SDomjDBvMYos+CmDyZYIMsCIxl0J8kEMAONCgb:Udt56ehi/H9SDomjDBvMYojCmDu7eWg

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_2705d06f3192137a747e9519317e058acfa8b5a9a11b8bbc7b8a46876bebacef
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections