General

  • Target

    81e22a59bfa25277d739dcd7398e8433_JaffaCakes118

  • Size

    347KB

  • MD5

    81e22a59bfa25277d739dcd7398e8433

  • SHA1

    71a72b043446af355a1e02893ba118d1611c142c

  • SHA256

    ba0368455b9a8e4d327bab55fc231cef52038f8330281b87dc2350ab95552ee7

  • SHA512

    1760e5be83f46e98b8fc81b4c8e956a39ee310088798ef539cbcd066918c8e6f3c0350c0becbab0b24ec88a1c92a920a7c129456042873a759e7552d70dba7f5

  • SSDEEP

    6144:WnCFsyTX1sbPyAUNMSKCFERMx/UBkcXbvJwOuvP2Nv/MO0BsOKXI:WnHyTF7KCrAkCbh7SPgMOfOqI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81e22a59bfa25277d739dcd7398e8433_JaffaCakes118
    .rar
  • mailreg/mailreg/FormSkin.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • mailreg/mailreg/VIP懒人邮箱注册.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • mailreg/mailreg/使用说明.txt
  • mailreg/mailreg/如果无法运行,请先安装.NET Framework2.0.url
  • mailreg/下载银行-提供免费绿色软件下载.url
    .url