General

  • Target

    JaffaCakes118_7eff3c10b9e97a5d9f7b650c7e5c2d9855c061a8abec41927acfa3af27170d9f

  • Size

    1.6MB

  • MD5

    0903dc30e91f8e58cf0a54299f2d536b

  • SHA1

    7effde038e91c339296ac34aba18dd38903de4c8

  • SHA256

    7eff3c10b9e97a5d9f7b650c7e5c2d9855c061a8abec41927acfa3af27170d9f

  • SHA512

    46402c77ad8437e267a07f00465b84d7a2697454671984572bd657b3184379bcd8ffae11aa07b1c3eeab5e3e799dc57f5accdb6017c23cdadfb4a5868bf57bfa

  • SSDEEP

    6144:Udt56eh8ITcleMH9SDomjDBvMYos+CmDyZYIMsCIxl0J8kTMAOEHg:Udt56ehi/H9SDomjDBvMYojCmDu7Tig

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7eff3c10b9e97a5d9f7b650c7e5c2d9855c061a8abec41927acfa3af27170d9f
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections