General

  • Target

    JaffaCakes118_ebc00fba1ae6fca850df2e602336ff40

  • Size

    40KB

  • MD5

    ebc00fba1ae6fca850df2e602336ff40

  • SHA1

    bfea3cafcd1e7b1dc60628dbe3e6ff39b6a8696d

  • SHA256

    fb8ccba3d2d160e131c23b741394c019decda9624ee10a4bf27a20fc3391b9b6

  • SHA512

    1102ee7607d3ee6f51188b3d5d740239ad47b4b91fd67d3e3a82d6bd0c3804588b0b35a94bd15a5af1f78dcb162df1fda7ca88d71b86ca5d2d34088d3a9ad2cb

  • SSDEEP

    768:yf7izEbXUQQXr34oZ7OuQdOsVhyV6Q+3DI:yf7iwbEp4oxOuchyEd

Score
10/10

Malware Config

Extracted

Family

njrat

Version

1.9

Botnet

HacKed

Mutex

Microsoft.Exe

Attributes
  • reg_key

    Microsoft.Exe

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ebc00fba1ae6fca850df2e602336ff40
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections