Overview

overview

10

Static

static

10

JaffaCakes...50.exe

windows7-x64

10

JaffaCakes...50.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6f3435822004e0f16a3a125e69ea2a50

  • Size

    29KB

  • MD5

    6f3435822004e0f16a3a125e69ea2a50

  • SHA1

    8fe4dea1c07402f9930ac7d06fd0217ea0e3ebfa

  • SHA256

    51266f44bf584ed685f4ecedf2a8e63a3abf371020270c43ddd4ed126b231cbf

  • SHA512

    44a0f31d87537c673c05ccf62f1e6a892f4347a63304664bb16636641b3d36d8ea1c35c4a38f67b55cabb9132d719ee7b860f02065d7a685c68476ad98ee913a

  • SSDEEP

    384:Jyotl7bJdYQwiJYYHt5PgjmOmqDoFE4eoKGBsbh0w4wlAokw9OhgOL1vYRGOZzs7:/7/YQwiNGjAqc3eYBKh0p29SgRkUDE

Score
10/10
صكاركم الموسويnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

صكاركم الموسوي

C2

sososajad:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6f3435822004e0f16a3a125e69ea2a50
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections