General

  • Target

    5e1e86f3b68734d7edd94c01d8903153_JaffaCakes118

  • Size

    680KB

  • MD5

    5e1e86f3b68734d7edd94c01d8903153

  • SHA1

    2207bed6f260aabad04008d5f690a0b6a01bf5fc

  • SHA256

    396abf60f845335abc3c3e6c1ab462467c13dc126a67d94f915273fc9bee33fd

  • SHA512

    b00aa51a503ef1c22812b5becab3c16393e3c12c448e11fa2cd78134b66815433f4be607af4c048347460cd8fa594e65bea8fdff3e4314508d02ea715c520eda

  • SSDEEP

    12288:ydfQ70ov/E9GbfZj4JoSKW5M2YEd4mq1qJoJDNCiH2GkdypUEWqOf83O6EIt:yI0onE9Gdj4QW5BYEd4mmqJsDRH0oqGn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e1e86f3b68734d7edd94c01d8903153_JaffaCakes118
    .rar
  • English.lng
  • HELP.CHM
    .chm
  • History.txt
  • WaterMarks/PhotoMark.PWM
  • WaterMarks/新云软件.url
    .url
  • photomark.exe
    .exe windows:4 windows x86 arch:x86

    eb2e0eec3f861ad193cb67aceafe3d19


    Headers

    Imports

    Sections

  • photomark.url
  • 汉化说明.txt