Overview

overview

6

Static

static

3

richpm/RichPM.chm

windows7-x64

1

richpm/RichPM.chm

windows10-2004-x64

1

richpm/RichPM.exe

windows7-x64

6

richpm/RichPM.exe

windows10-2004-x64

6

richpm/psapi.dll

windows7-x64

1

richpm/psapi.dll

windows10-2004-x64

1

richpm/安...��.url

windows7-x64

1

richpm/安...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    146a7a03c65db604553d7e234632fa0d_JaffaCakes118

  • Size

    278KB

  • MD5

    146a7a03c65db604553d7e234632fa0d

  • SHA1

    8a4a6718401ba9ff93e841348fbbce62a906bfaf

  • SHA256

    4fb05e24df6dc69c7baad5e1f92ffe6d2797723306bc0ec3c677d4104281a9f3

  • SHA512

    45e64c4e3b7fce9a2468d3e154da3cbf1b9d108b59a118a3ec92896edcf69514c08a294c1426dc750f226e7d366af9ff7d32efa8e76ab593c6e381e55c65673a

  • SSDEEP

    6144:jyM9r7llG9kAPvt0pNZq4OSE9qLtrAR3tlAmk6zwBf7+RNXekWsIt:j9DG9k80pC4O/kLyR3tANBT+RNXesE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 146a7a03c65db604553d7e234632fa0d_JaffaCakes118
    .rar
  • richpm/RichPM.chm
    .chm
  • richpm/RichPM.exe
    .exe windows:4 windows x86 arch:x86

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Sections

  • richpm/psapi.dll
    .dll windows:5 windows x86 arch:x86

    4f06ff37a7b9341707b17c1d316a94cd


    Headers

    Imports

    Exports

    Sections

  • richpm/安装说明.url
    .url