General

  • Target

    6d5e665236534dd31838698c4bb3bfae_JaffaCakes118

  • Size

    10.4MB

  • MD5

    6d5e665236534dd31838698c4bb3bfae

  • SHA1

    4e939ff1100ccec8efd53e87335ddf18781a10a8

  • SHA256

    3eba02e58ecdb95893f3875b62a51eda51857d1c77e8fd98e242e56d83399759

  • SHA512

    1c403b31d88749464dbf5527c6191b902c886385b402346472f2f37f1a2fa69d4ac8ae8aeb9689e1e8f0bef08fb7a86f43ad27b356633d0a836ad2c079744f8b

  • SSDEEP

    196608:/ZCZXV7PrnhdhIT+IJlal5Aj8iCzTHl8Jqb2/AOGlBH8iwaEfcOQ:/ZCxRrnfy+SC5XiG5q/PGP8RcOQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d5e665236534dd31838698c4bb3bfae_JaffaCakes118
    .rar
  • Clan Spin/GDFwSvc.exe
    .exe windows:4 windows x86 arch:x86

    e7075482c29e949390e49ccafcdce0e2


    Headers

    Imports

    Sections

  • Clan Spin/rev0lt/bin/rev0lt.dll
    .dll windows:4 windows x86 arch:x86

    60a6a61741598595851e0867d2c79dd2


    Headers

    Imports

    Sections

  • Clan Spin/rev0lt/skin/Main.bmp
  • Clan Spin/rev0lt/skin/Mask.bmp
  • Clan Spin/rev0lt/skin/Thumbs.db
  • Clan Spin/rev0lt/skin/skin.ini
  • dlya_vesa)