Overview

overview

10

Static

static

10

JaffaCakes...d0.exe

windows7-x64

10

JaffaCakes...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    JaffaCakes118_6d016be537fc70cd512babdf959b50d0

  • Size

    23KB

  • MD5

    6d016be537fc70cd512babdf959b50d0

  • SHA1

    81ab02fd5acf72de0a56dd2586bef2fadfa8a4ae

  • SHA256

    dfdc01fb4fc21bb61680c4e21d5d545ebbc0fe073f3b1f9bd9453517c9e5d12f

  • SHA512

    0aaf78ba5cf9962b4e6cd1be106084c48e5b58ea2507b3b3a4a07bd8515c655891f6b71d5ea222bc5afe4845140843bbf236cbce93a1728753dff023551d03be

  • SSDEEP

    384:JsqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZbX:iSoQA6mlcrRpcnuI

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

darkdx2002.no-ip.biz:1177

Mutex

266892406dc5018336a14d21804e3dbf

Attributes
  • reg_key

    266892406dc5018336a14d21804e3dbf

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6d016be537fc70cd512babdf959b50d0
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections