General
-
Target
JaffaCakes118_d9b0db2aaa35019207d90db1ef5b69fcce515313c0104c3ac464de6f92dc2039
-
Size
164KB
-
MD5
d09d32ea36b1b9ed851b8754017ce2d0
-
SHA1
329aba12584b4adc36a7fede61acb77d673b91bc
-
SHA256
d9b0db2aaa35019207d90db1ef5b69fcce515313c0104c3ac464de6f92dc2039
-
SHA512
31ed7de5f0a4112c0477fe20f2bdb443c5b40df4785c72c06998c814802a238dd7b379358ca070bc2bc13602f12e9038fb6f103cdbf97c7a91f77bda73e2720e
-
SSDEEP
3072:RSpv2E2zk5Z76iMFptQ6Ndyuuom2mhNfSqLikNYir1sD:RC28fJMFjnNdyuuom2mLxGkc
Malware Config
Extracted
xloader
2.5
d6cd
fatmerlion.com
gpo777.com
pacpointfg.com
s3k9r3de.com
jakitrade.com
tmsweets.biz
goodfoodsme.com
teddydefi.com
banahinvestments.com
kuvinziarno.quest
gma-bea10.com
onepotato.xyz
olympusconstructioncompany.com
amvids.info
tmc.wiki
swiftlybliss.com
provopreserve.com
rsvprose.com
staffremotely.com
diversifiedcontractingla.com
Signatures
-
Xloader family
-
Xloader payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_d9b0db2aaa35019207d90db1ef5b69fcce515313c0104c3ac464de6f92dc2039
Headers
Sections