General

  • Target

    4ceae02e14e67fdd48348993ab8e4dc0_JaffaCakes118

  • Size

    37KB

  • MD5

    4ceae02e14e67fdd48348993ab8e4dc0

  • SHA1

    14722794ea947c9313218f8743c231664355654b

  • SHA256

    07fb877981e4d1636c12fa1e620eafac528ceb16e6e0674e5280eeb879bd8af7

  • SHA512

    65935e24e01e3dff6623944a9e0f6c45d68be2712f252ef332d27ceed1c0d65555b72dc7a1a967c0aee6183b79b58aa007b3ea6441eb720c15c1b6b5107a545f

  • SSDEEP

    768:gminsfJ506k2CjMLIbb1Csoc/OpfxwtAAFkwc0xt/pSBFGfFRz:uqJ506WbMcSf+tAAawc0//pmFGfnz

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ceae02e14e67fdd48348993ab8e4dc0_JaffaCakes118
    .rar
  • HashMyFiles.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 南方的雨 博客 - 原创技术交流博客,集合各大论坛精华..url
    .url
  • 听画书苑 开源_影视_资源_互动_社区.url
    .url
  • 必读.txt
  • 新云软件.url
    .url