General

  • Target

    JaffaCakes118_8fe7ce45c484e2c848e508b3515156b4

  • Size

    370KB

  • MD5

    8fe7ce45c484e2c848e508b3515156b4

  • SHA1

    da5d91404518bd296e66cb29c80983a292b4159e

  • SHA256

    7716b812c1d0d3655aee7ecebb54dc3dd85f59bb52a80fdc0f4239db9423a497

  • SHA512

    436f6c95288376b8b5291c45cf09de2be08241e30c3621608098e5cea524c381ccb08b7941f4faa9fbdc0a9f080b16e46aef9f5f9ec417ecbc3ff89199c3079b

  • SSDEEP

    6144:aDuHC9p2W7B6l53TkV4Dcbzb82OUiR0k+CzS:aCi9p2JIb8Yi3+eS

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    3000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8fe7ce45c484e2c848e508b3515156b4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections