Overview

overview

6

Static

static

3

mrsph.dll

windows7-x64

6

mrsph.dll

windows10-2004-x64

6

mrsphremove.exe

windows7-x64

4

mrsphremove.exe

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    178da098013a1d67073878f1b60cccc6_JaffaCakes118

  • Size

    559KB

  • MD5

    178da098013a1d67073878f1b60cccc6

  • SHA1

    4361204ca865a6848260298f4be977b1debe26e7

  • SHA256

    fa70ae098c8aabe1467e2e49ee3a4e29c8adeb14e74fd7972b834c76c1fe1b3f

  • SHA512

    b35030f92abcedbaa702f6333ead228812aab7fc78f46b01df905d4fdc4e2bb0dbba82461af39b96207bb6238a61a7a2c748ca58aa7d873279de20dd84167e17

  • SSDEEP

    12288:cpgEzIMzvTnwJObBH6MhV4RVizTKpGaQIcecSkh0ha2TRiFY6DaAfjwrv:gZU8TnsObB/hiRMymS6l2NiS6Da2gv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 178da098013a1d67073878f1b60cccc6_JaffaCakes118
    .zip
  • mrsph.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • mrsphremove.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections