General

  • Target

    JaffaCakes118_8a6f0874298f1d76b771c31e4c48da18

  • Size

    245KB

  • MD5

    8a6f0874298f1d76b771c31e4c48da18

  • SHA1

    23c9f37aab365b777d701d1223863318f214f9c6

  • SHA256

    8bc501d4578a0f509d94dae1537748bfd6e99afa983b3d62ea690f18a9c3611a

  • SHA512

    bc2df25fc0bc0139581ba6c01d851ca31c0d611c1805d66c6bb38297b932b8354bdc0d128196d3a45c767dd162cfcc1273d98e55393c17f0a1636a56bc18606f

  • SSDEEP

    6144:4OTcK+NrRioGHlz8rz0i/ZzQqqDvFfAgDNPm0ft61mzLpmo1HAxN9orm:4K+Nr8MrYi/7qRogV/ft61mzLpmo1HA5

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • Core1 .NET packer 1 IoCs

    Detects packer/loader used by .NET malware.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8a6f0874298f1d76b771c31e4c48da18
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections