General

  • Target

    01a60f1a2afbb41360fe52265569b831_JaffaCakes118

  • Size

    1.5MB

  • MD5

    01a60f1a2afbb41360fe52265569b831

  • SHA1

    00a9cc7375d3451b372fa5ead6ccfda65729727d

  • SHA256

    89d9a52a64597af57e54c7da60160cc1575ceb52a347eb65b3c97d4cecb3fca4

  • SHA512

    8bdec15d994a915580f27e963b2a18ec9c5e9ecb2b38ebceff279c46db48b25467b95d1ea21ba7cca21bd4159f496073cc78fd9d7a9b3ee2734df52e50cf8daf

  • SSDEEP

    24576:k37F538LpenXUnM4XQgS2MX8ODdIWbEKHZ/ErA75Z0Rol8Rzpyns9m2IgYK1qF86:U7F5MLQnXUbxODCBrI5Zxns93Xa86

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01a60f1a2afbb41360fe52265569b831_JaffaCakes118
    .rar
  • 上兴远程控制20090405破解版/QQWry.Dat
  • 上兴远程控制20090405破解版/rejoice.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 上兴远程控制20090405破解版/sound/offline.wav
  • 上兴远程控制20090405破解版/sound/online.wav
  • 上兴远程控制20090405破解版/新云软件.url
    .url
  • 上兴远程控制20090405破解版/配置参考图.gif
    .gif