General
-
Target
042b16a26fcffc35b893375551149cc5_JaffaCakes118
-
Size
689KB
-
MD5
042b16a26fcffc35b893375551149cc5
-
SHA1
fd11f0a6c19586017bec50e01f28dfc012641680
-
SHA256
b61876df19768d1a42749d8b0159350f118895d1f6ccf7f3c3a4be858ee987e5
-
SHA512
37efb2cd60015dbc504e6d1c87a33043b9cba522bdf900157f056666b1e0a4e7f65c1225e681d5e34e5e6a5a380ae455998b6f5037493e3abdf01081596b9ab2
-
SSDEEP
12288:+EEpxKHTPMLjde4EyCY3ftCFs1dxUWjG3kjcXAANpjUC3SzvJsae90XAkk:v1H7MXd7maH9UWyecXAAzjUuSzTeuXA9
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
042b16a26fcffc35b893375551149cc5_JaffaCakes118
-
BOOTITNG.EXE
-
BOOTITNG.PIF
-
DISKIMG3.DAT
-
EMBR.ZIP
-
EMBR.EXE
-
EMBR.TXT
-
FILE_ID.DIZ
-
MAKEDISK.CFG
-
ORDER.TXT
-
Purchase BootIt NG.url
-
VENDINFO.DIZ
-
bootitng.pdf
-
http://BootItNG.zip
-
http://MakeDisk.zip
-
http://command.com
-
http://graphics.zip
-
http://ibmdos.com
-
http://ntdetect.com
-
http://terabyteunlimited.com
-
http://terabyteunlimited.com/utilities.html#makedisk
-
http://www.TeraByteUnlimited.com
- Show all
-
-
deploy.txt
-
graphics.zip
-
BINGPSP.PAL
-
readme.txt
-
license.txt
-
makedisk.exe
f1db3f3ef2631b9c46c74da14a2cf643
Headers
Imports
Sections
-
pad_file.htm
-
pad_file.xml
-
安装说明.url