General

  • Target

    5dd91560fd708916979b245ffca7b00c_JaffaCakes118

  • Size

    280KB

  • MD5

    5dd91560fd708916979b245ffca7b00c

  • SHA1

    5cef51611aeed236b5c113aa7962f101652d479c

  • SHA256

    4d88e0a04c9b718e414178555ee5f5beefdc201476adfaf735257d69f1624e39

  • SHA512

    b0aaff25ce176f49c8725de33a3d9599c981497e4d9ddf5dd84fda157be79644139abed6f32af326e9f15149e78ddd028c80ce8a6d6bbe38b10456da9aaf726e

  • SSDEEP

    6144:pFnqBKcQWk3nMXMzMi3EVs1lO1zxNZPMmxdIM74CJg/CYQ51A9G3mFxdPCNIawgH:pJqBDQWvcv3EVH5MUxxgaYI3mFx5kVXv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5dd91560fd708916979b245ffca7b00c_JaffaCakes118
    .rar
  • Passware/ariskkey.dll
    .dll windows:4 windows x86 arch:x86

    b52d799c44c87a199ae8aec934147fc4


    Headers

    Imports

    Exports

    Sections

  • Passware/ariskkey.exe
    .exe windows:4 windows x86 arch:x86

    98725a1e4e54a69ca25defcd27af2eb3


    Headers

    Imports

    Sections

  • Passware/pk.chm
    .chm
  • Passware/新云软件.url
    .url