General

  • Target

    059264141ae1aa02fbef79bb21f0f5f8_JaffaCakes118

  • Size

    3.0MB

  • MD5

    059264141ae1aa02fbef79bb21f0f5f8

  • SHA1

    f7e8d386fa5e5c3eea2fb76f695e90714748f0a4

  • SHA256

    b14ce0a44be89802069df8940bbe5d04503bec467d1fd91856aa2a5396e86295

  • SHA512

    4f156db1083b13ed61a2807bc4d4f2feafd3110f22a56a06b3ac681eb3ab578483e12fbcc4c0bf4969d2361a1f9ec016c18b5dcfb32d8e3c3585b3ecb52ed4e9

  • SSDEEP

    49152:PCO8uXVAcqvwudgMFfLl7i5wxznYlXToyiOLllhHxxjuTsUIMEpuKLQ:qOZ5Igb5wlSMOLbhH0sUFa9Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 059264141ae1aa02fbef79bb21f0f5f8_JaffaCakes118
    .rar
  • Postcode.dat
  • PowerSearcher.exe
    .exe windows:4 windows x86 arch:x86

    cae839bff3b6b85345f7b2d526a6b2e0


    Headers

    Imports

    Sections

  • TurboDLL.dll
    .dll windows:4 windows x86 arch:x86

    b2a4407296ec391df35efa6e9a2dd8ba


    Headers

    Imports

    Exports

    Sections

  • Update.exe
    .exe windows:4 windows x86 arch:x86

    87685671779f450454b73d8eac0d9d7a


    Headers

    Imports

    Sections

  • interpc.dat
  • ip_phone.db
  • plane.db
  • train.db