General

  • Target

    663a6c05545f35bc371e579864b4d70f_JaffaCakes118

  • Size

    37KB

  • MD5

    663a6c05545f35bc371e579864b4d70f

  • SHA1

    8c04a318340f0720022b4a36df580f21937e17fe

  • SHA256

    3e80e4870100ede49823f94be496d936370655b5ee4b3f40bafe3c0a40ba9b66

  • SHA512

    ce0c7351c70df6b9d4c5d30a6fe8b1e34c362b1d509e0a8c54d8519e622129a37a98f50bd2780754441f48f39e60ecf4585c7fc6a689fbadc05fa039c8a0637c

  • SSDEEP

    768:QDGV4ezrmClCFGtq56K4xiQrcZIbMupifmMtOAWuovaWETWhBLqyIbgPnGs0p6e:QDGRCst2Qx3cqbDMfmL53sgPGs0p6e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 663a6c05545f35bc371e579864b4d70f_JaffaCakes118
    .rar
  • 最新更新的取硬盘物理ID和DES加密/NetDiskDLL.dll
    .dll windows:4 windows x86 arch:x86

    541f145c67b4a204bcb34af862b54dbe


    Headers

    Imports

    Exports

    Sections

  • 最新更新的取硬盘物理ID和DES加密/a.pbw
  • 最新更新的取硬盘物理ID和DES加密/demo.pbl
  • 最新更新的取硬盘物理ID和DES加密/demo.pbt
  • 最新更新的取硬盘物理ID和DES加密/下载说明.htm
    .html .js polyglot
  • 最新更新的取硬盘物理ID和DES加密/新云软件.url
    .url