General

  • Target

    4b43ed73769e40ec37bc70728ecd68b4_JaffaCakes118

  • Size

    744KB

  • MD5

    4b43ed73769e40ec37bc70728ecd68b4

  • SHA1

    2e86d345af0f9a21fcf78c3164fe2ec8becd1368

  • SHA256

    075fed318a4ffc438c683cc90b815a2de0b87505b34ed5659e7892c80b677919

  • SHA512

    b1227735dbb61ac56d2a54d74a4c325942bb81eb024bad7cab46538c251d5e563a05a04e555b0e9e7af44ec500f9ac297993d28d6c82ede72fd6a474bcc48197

  • SSDEEP

    12288:sv+j0UlfKR9AUxwCj55JLlcP2g7cp6V5Ir7Q+85omQu7dueBUnPTzz4ZJu2:svbyfO9A/A5ZSPvU6tOhu7hB6Oz

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b43ed73769e40ec37bc70728ecd68b4_JaffaCakes118
    .rar
  • LockFolder.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Readme-说明.html
    .html
  • 新云软件.url
    .url