Overview

overview

10

Static

static

10

JaffaCakes...63.exe

windows7-x64

6

JaffaCakes...63.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63

  • Size

    403KB

  • MD5

    f0da2d4e9fb86b17d441aa151c783a63

  • SHA1

    f925eca11fe1804b7aec7b1a57e580c94f6585a6

  • SHA256

    99b22b6b668ec9e90d93caa42237dfa8e37259d56d824e5ba50d97633d23ebd5

  • SHA512

    7b9e4a4248e6bd65bf69949391258dfb313c74948f3c0bf6a5f397a0892d9a6471433376c27bd04c86f786987a7fa315e6d5908533efa41e41e63931f5768bef

  • SSDEEP

    6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLE:Sql3k/b1ugaUS2zt

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63
    .exe windows:6 windows x86 arch:x86

    6256ca6fb1d33cce27dff272311e3072


    Headers

    Imports

    Sections