Overview

overview

4

Static

static

3

ResScope.chm

windows7-x64

1

ResScope.chm

windows10-2004-x64

1

ResScope.exe

windows7-x64

4

ResScope.exe

windows10-2004-x64

4

bform.dll

windows7-x64

3

bform.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    70c1a12c13994f704a95c34099c874da_JaffaCakes118

  • Size

    1.3MB

  • MD5

    70c1a12c13994f704a95c34099c874da

  • SHA1

    ad38ef53f83f386a5f1a64f95739ce0c17b62e78

  • SHA256

    20ac276e5543babea50b14e1c7098e74a9d27e9a9c26186e8e5a6f3dc1167b9f

  • SHA512

    f58006931904d24ee3991bffede125eb499da8b9f4e4c6b88fbf5d8b148554a6351a075539b42f549eb3597466044385e089b9e065c56e142921e46c8868ab58

  • SSDEEP

    24576:mpq22WvevFGxn5chV8kSjJrSV5O8y1mkyBRN0DxzQ0hRE/aayDjMXXL:mpeWvevFGxiv8kSJF/AkW0xjZML

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 70c1a12c13994f704a95c34099c874da_JaffaCakes118
    .rar
  • ResScope.chm
    .chm
  • ResScope.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bform.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • for_9X.reg
  • fro_xp_or_nt.reg
  • 使用说明.txt