Overview

overview

10

Static

static

10

JaffaCakes...30.exe

windows7-x64

10

JaffaCakes...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_788a7179737a9a07f5c7841a3d997a30

  • Size

    29KB

  • MD5

    788a7179737a9a07f5c7841a3d997a30

  • SHA1

    9c8e1fc8e46b8782c5f772985b072d0dced49f42

  • SHA256

    824d982dd022bedc4aef004d0efafd38517d88b4db3bd70a0df5ba1e001c925f

  • SHA512

    0d0e8986be6fbd2b8833ceac8c6abb2289f696c2b86d639c4abb190f313b35f4008f7fe016756d8bcd15c551dd164102fffb3a78084a120e46208b413898b261

  • SSDEEP

    384:d2nLNl73t5otQMOdePp5TdNZmGmUD8ZneQqGBsbh0w4wlAokw9OhgOL1vYRGOZzs:+7jo2MzBvb4UcneQBKh0p29SgRjyn

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

hardysalah.no-ip.biz:1177

Mutex

cd9e051ed80df1a0c0b000059793bab8

Attributes
  • reg_key

    cd9e051ed80df1a0c0b000059793bab8

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_788a7179737a9a07f5c7841a3d997a30
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections