Overview

overview

7

Static

static

3

pFarm.exe

windows7-x64

7

pFarm.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    624a86f625933d23cc6c2b52d2846f5a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    624a86f625933d23cc6c2b52d2846f5a

  • SHA1

    4a5bed34f795852bdd415538ea0bc4258e054a17

  • SHA256

    31961d581aba9d9512be619e4ab96d92979a0a57894f039637e020111b4dd73e

  • SHA512

    b19872436a2af5e95a9a8da7d35362f7386b90b6d20ed90d491c9a0924fc2ea4dd22f5253672832cb73f57f2cab5bc8d85a6543a447b7103f24d157e63eb27d7

  • SSDEEP

    49152:SVVeUTdqMC1APozB6D+sJ6uaCONKCBIjglYwi931ltlV5pSHQGJ:SV0UTgMWAKB66ZuaCilbli93PtlViQE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 624a86f625933d23cc6c2b52d2846f5a_JaffaCakes118
    .zip
  • Data/GlobalBL.dat
  • Data/IDBL.dat
  • Data/ItemDB.dat
  • Routes/Bigroute_Great_Planes_V2.cfr
  • Routes/Bigroute_in_DBV.cfr
  • Routes/DBV.cfr
  • Routes/Forest of the PlumeX.cfr
  • Routes/LostCityX.cfr
  • Routes/MY_en.cfr
  • Routes/SwampV2.cfr
  • Routes/Test #2.cfr
  • Routes/Test -DVP.cfr
  • Routes/testroute.cfr
  • pFarm.exe
    .exe windows:5 windows x86 arch:x86

    29480931c9df46efe6a9c715442e42b3


    Headers

    Imports

    Sections