General

  • Target

    5a4faad33c497dc7dbbb1e7f79282d84_JaffaCakes118

  • Size

    363KB

  • MD5

    5a4faad33c497dc7dbbb1e7f79282d84

  • SHA1

    5516b7306bbffe0f218b5ccc72fd4fa216f07e96

  • SHA256

    b812a6c34800f8491829aa7fcd8d060c5879dfc313feedc697727c11386af1f7

  • SHA512

    d41ba50d0861d19e2e2148cc77604a55ed3c78576b8c78b6713b2a21beb5f0d7d14ce454363cbb5c94af6c693d4883e751f702952fab0f9de3cc9f8f9f29e787

  • SSDEEP

    6144:z2TG+iFDUbkA83nr6xu/ZXdIZrJTWvEUTwDY3MGfg63pc2U:zWG+iBFdnegveUTgY3MGfBU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a4faad33c497dc7dbbb1e7f79282d84_JaffaCakes118
    .rar
  • HTMLTORTF.HLP
  • HTMLTORTF.cnt
  • HTMLtoRTF.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • HTMLtoRTF_PRO.ico
  • License.txt
  • Readme.txt
  • command line.txt
  • htortf2072p.cnv
  • htrv2072p.ini
  • keygen.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • sample.cfg
  • settings2072.ini
  • test.htm
    .html
  • test2.htm
    .html
  • test3.htm
    .html
  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.txt