General

  • Target

    2dd1d3518f44095986bd829e43c75e2c_JaffaCakes118

  • Size

    1.1MB

  • MD5

    2dd1d3518f44095986bd829e43c75e2c

  • SHA1

    b7b87a140e696992d59d8a78a60f633ebfd362f8

  • SHA256

    55e7f2aee200a66f7889dc8f01b6631c52d2eace710fe7433cd19f34f1f0b346

  • SHA512

    f10b452e91e678fa056219be01865a10c43a402705cb967019122e2dd52ad9b6cedce2b465de37111dfc44349d6209077cf10ddfd6a8cedb8ccbad3daba2ec85

  • SSDEEP

    24576:sDNDf2E5IWgApTC9SVXxVjUreBFqlHuYs4+uXAkp+KDZ/PF:mND1gAplhxHq9fs4pe0l

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2dd1d3518f44095986bd829e43c75e2c_JaffaCakes118
    .rar
  • ddzhp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url