General

  • Target

    c9c937d7791010e40713bf9c7812a532_JaffaCakes118

  • Size

    546KB

  • MD5

    c9c937d7791010e40713bf9c7812a532

  • SHA1

    2d09ec0b24b7eb281d5e37ad3cf3fd9fe9336615

  • SHA256

    43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af

  • SHA512

    2afc3e89b8bdbd2dd280802bb73d11fb5a4d41b6100ae6c1bc61aa099f3387c91068b9478c4888800e4fde6e70cc43bebd258b33e4b09809b3f1c103a0fc132f

  • SSDEEP

    12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTp5TQdIJWjI0g0A8Hcqr4d:aWUWrnIrw7I1VGCXZbiiEQdAWngR8k

Malware Config

Signatures

  • Detect PhoenixStealer 1 IoCs

    Detect Phoenix Stealer.

  • Panda Stealer payload 1 IoCs
  • Pandastealer family
  • Phoenixstealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9c937d7791010e40713bf9c7812a532_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    06c6e92acd3ff57b00b3132976b3f6d6


    Headers

    Imports

    Sections