Overview

overview

7

Static

static

3

9L0-505.exe

windows7-x64

7

9L0-505.exe

windows10-2004-x64

7

9L0-505pdf.pdf

windows7-x64

1

9L0-505pdf.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    07e6fa8947fd6df51e3cee08512efa9d_JaffaCakes118

  • Size

    1.5MB

  • MD5

    07e6fa8947fd6df51e3cee08512efa9d

  • SHA1

    86be381d05f30377b269d70fbd1ca3ceee02145d

  • SHA256

    ca6852fb1d627e3948fed5ecfec78cf0a4173dea22199025f3eddcd08ad36213

  • SHA512

    ff0d3d2aa28bc672011d4159ea1c58e30bea1ab728294f75bb40d3c44df2bb07aa6c94b26749ec1c41bf9d2096467ec1cb2c9aa4653c131a25ea3b2c53e96c6a

  • SSDEEP

    49152:zgMAiqtyjWAhbK3nc4x7o95C35DNBpwXQ:hAJySOS7IC355uQ

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 07e6fa8947fd6df51e3cee08512efa9d_JaffaCakes118
    .zip
  • 9L0-505.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 9L0-505pdf.zip
    .zip
  • 9L0-505pdf.pdf
    .pdf

    • http://Pass-Guaranteed.com

    • http://domainPass-Guaranteed.com

    • http://www.Pass-Guaranteed.com

    • http://www.pass-guaranteed.com/bundles.htm

    • http://www.pass-guaranteed.com/custom-request.htm

    • http://www.pass-guaranteed.com/log.htm