General

  • Target

    91ec913fac07c53e674d2e417799285b_JaffaCakes118

  • Size

    1.5MB

  • MD5

    91ec913fac07c53e674d2e417799285b

  • SHA1

    a5bd3c0dbf7c1846c8d540f7444e26dfcc919a3e

  • SHA256

    ba5b768e7440f7c7812a14cbfdfbd96a3ca6a2fd623357af4cfcb424df3b65a9

  • SHA512

    90a87d615af23ab8c09b720367ab1500fff995171199b809b3d149a6a53586966217d3c29381ff91542c472833f0bee396336ffa95904f5dc3160148e1abf91d

  • SSDEEP

    24576:xH0guiedHXx4xpbJnaUPuDU3bK91xz+OFfVfDq8UoHc3U0OPMNU0bUIfqBw+vm5Q:CguiS3aP0U3bK3xaef5U1LwdZvm5aF

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91ec913fac07c53e674d2e417799285b_JaffaCakes118
    .zip
  • HP0-409.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • HP0-409pdf.zip
    .zip
  • HP0-409.pdf
    .pdf
    • http://Pass-Guaranteed.com

    • http://www.Pass-Guaranteed.com

    • http://www.pass-guaranteed.com/bundles.htm

    • http://www.pass-guaranteed.com/custom-request.htm

    • http://www.pass-guaranteed.com/log.htm