General
-
Target
JaffaCakes118_579679e92d1a1d0634b66be78f7328f716fdc8339c222574ff0950149acc8b20
-
Size
164KB
-
MD5
37392adefb6280e1844deb8108f1cc85
-
SHA1
e3d9c3901865d1ac646c899f3d25545fdb1a12e8
-
SHA256
579679e92d1a1d0634b66be78f7328f716fdc8339c222574ff0950149acc8b20
-
SHA512
dd28e0f01f47a5f35d6f509bfe991c3a0dee9855056d6f067f86ed7d78816d1e958554f8e9edbb2d02527d57d12f09601ffbcfdc22a612e83d17ea6294752508
-
SSDEEP
3072:3gJhZJj7aSTwJ82lAMFxTen040cD/2/KVt61Lp4WDW:3G9ciMFBw0jcD/2/KXWW
Malware Config
Extracted
xloader
2.5
ct2t
openpatent.online
saintgeorgeinsd.com
izakgrove.com
djammari.net
seniorhm.com
gmttechnical.com
premierrofzms.xyz
ttfusj.com
barcepas.com
kcmorgageguy.com
web-de-ehon.com
ouachitah.com
foreseeactive.com
davisbroadband.com
stockdata.systems
kathykeatsinsiders.com
fishhousejo.com
pacobuilder.com
paynec.com
biodyne-el-salvador.com
Signatures
-
Xloader family
-
Xloader payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_579679e92d1a1d0634b66be78f7328f716fdc8339c222574ff0950149acc8b20
Headers
Sections