General

  • Target

    6f9f5d7404215435928ed447e62e1def_JaffaCakes118

  • Size

    19.7MB

  • MD5

    6f9f5d7404215435928ed447e62e1def

  • SHA1

    b6ca6899620a01018872ddea2fbba332b2f31595

  • SHA256

    c4186e5256bad3886168ba647587834cfec489b77adcc94b3c35d1ddd42a1954

  • SHA512

    102411183e05ced4e4c2471a071d6296e392363984b6a23fc2b9333553d73ef9ae0a13330bca92d46e0d475a31684b4e02d9d9190d5c00905d0a46f91fba842d

  • SSDEEP

    393216:e8BP5z9/R8PfWsZDnq7Kqh1HWRG68UOWcXhf+VpFm21davVnBvr69fmW+kv:/xgfWssKqn+HjcXx+VpFalBvs+kv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f9f5d7404215435928ed447e62e1def_JaffaCakes118
    .rar
  • Vista 风格包 For Win2003 SP1 & R2/Vista 风格包 For Win2003 SP1 & R2.exe
    .exe windows:4 windows x86 arch:x86

    d5e0355f8764c235b38759b860077ceb


    Headers

    Imports

    Sections

  • Vista 风格包 For Win2003 SP1 & R2/安装说明.url
    .url
  • Vista 风格包 For Win2003 SP1 & R2/效果图.JPG
    .jpg
  • Vista 风格包 For Win2003 SP1 & R2/说明.txt
  • Vista 风格包 For Win2003 SP1 & R2/重建图标缓存.exe
    .exe windows:4 windows x86 arch:x86

    60663a62f255823964725264aad30445


    Headers

    Imports

    Sections

  • Vista 风格包 For Win2003 SP1 & R2/风格包可能导致IE6使用问题恢复文件.rar
    .rar
  • 正常效果.jpg
    .jpg
  • 系统原版/shdocvw.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    7d5a0d1f8c7b7fd5afc404d6d02e772d


    Headers

    Imports

    Exports

    Sections

  • 系统文件安静替换.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 美化版/shdocvw.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    7d5a0d1f8c7b7fd5afc404d6d02e772d


    Headers

    Imports

    Exports

    Sections

  • 说明.txt