Overview

overview

10

Static

static

10

JaffaCakes...91.exe

windows7-x64

10

JaffaCakes...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0945583bc2a993c68890f9f4667fb291

  • Size

    70KB

  • MD5

    0945583bc2a993c68890f9f4667fb291

  • SHA1

    277372c1e31e3b3e48e0961eec1edf675f28076d

  • SHA256

    748d2ed0eacbc5e7bd27ee8991636a251df6c74efd0528c665a1017401940f8b

  • SHA512

    604b990d6af9adb0c043ce90f3bc35f2afcd8d84a93e41d44b0a94de8ce779171ee4f29a444f4340e52e39a5cf8322e7dc07ca5c2a8a2aecbfa18a7e92c18ccf

  • SSDEEP

    768:oBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmdZfB5AVXIX94JCLEbD:yU8cO7u2NbvdOc8VKUaOdNdRzM4ECs

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_0945583bc2a993c68890f9f4667fb291
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections