General

  • Target

    72190e372e78f55bc6722b19689549eb_JaffaCakes118

  • Size

    3.8MB

  • MD5

    72190e372e78f55bc6722b19689549eb

  • SHA1

    ab988ef9f0231f414ba5101cb6443514e0c3f4c8

  • SHA256

    9b9f9627c32d2caaa9394d46f014ae46851ed83563e1e3d4da981378df6ff024

  • SHA512

    4d10cab5614fb6ae9fdd0ef07a098f3b430a1460551c8f060c5f6e0b40ee5f5739bcc7f45db99592e1409b9b64259417f818806ed6afbfaa5ef8ad53a94c3ac4

  • SSDEEP

    98304:FDPfi0RGC6L2Luvqj1gR9qsbUIpM6xnpbSU40RDb6:FTZt6CKqmR9qsbUsbxnpn405u

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 72190e372e78f55bc6722b19689549eb_JaffaCakes118
    .zip
  • pdf2html_cmd/cimage.dll
    .dll windows:4 windows x86 arch:x86

    efbc960a3d95c0842c92833a138ecf11


    Headers

    Imports

    Exports

    Sections

  • pdf2html_cmd/encoding/78-euc-h
  • pdf2html_cmd/encoding/78-euc-v
  • pdf2html_cmd/encoding/78-h
  • pdf2html_cmd/encoding/78-rksj-h
  • pdf2html_cmd/encoding/78-rksj-v
  • pdf2html_cmd/encoding/78-v
  • pdf2html_cmd/encoding/78ms-rksj-h
  • pdf2html_cmd/encoding/78ms-rksj-v
  • pdf2html_cmd/encoding/83pv-RKSJ-H
  • pdf2html_cmd/encoding/90ms-RKSJ-H
  • pdf2html_cmd/encoding/90ms-RKSJ-UCS2
  • pdf2html_cmd/encoding/90ms-RKSJ-V
  • pdf2html_cmd/encoding/90msp-RKSJ-H
  • pdf2html_cmd/encoding/90msp-RKSJ-V
  • pdf2html_cmd/encoding/90pv-RKSJ-H
  • pdf2html_cmd/encoding/90pv-RKSJ-UCS2
  • pdf2html_cmd/encoding/90pv-RKSJ-UCS2C
  • pdf2html_cmd/encoding/Add-RKSJ-H
  • pdf2html_cmd/encoding/Add-RKSJ-V
  • pdf2html_cmd/encoding/Adobe-CNS1-B5pc
  • pdf2html_cmd/encoding/Adobe-CNS1-ETen-B5
  • pdf2html_cmd/encoding/Adobe-CNS1-H-CID
  • pdf2html_cmd/encoding/Adobe-CNS1-H-Host
  • pdf2html_cmd/encoding/Adobe-CNS1-H-Mac
  • pdf2html_cmd/encoding/Adobe-CNS1-UCS2
  • pdf2html_cmd/encoding/Adobe-GB1-GBK-EUC
  • pdf2html_cmd/encoding/Adobe-GB1-GBpc-EUC
  • pdf2html_cmd/encoding/Adobe-GB1-H-CID
  • pdf2html_cmd/encoding/Adobe-GB1-H-Host
  • pdf2html_cmd/encoding/Adobe-GB1-H-Mac
  • pdf2html_cmd/encoding/Adobe-GB1-UCS2
  • pdf2html_cmd/encoding/Adobe-Japan1-90ms-RKSJ
  • pdf2html_cmd/encoding/Adobe-Japan1-90pv-RKSJ
  • pdf2html_cmd/encoding/Adobe-Japan1-H-CID
  • pdf2html_cmd/encoding/Adobe-Japan1-H-Host
  • pdf2html_cmd/encoding/Adobe-Japan1-H-Mac
  • pdf2html_cmd/encoding/Adobe-Japan1-PS-H
  • pdf2html_cmd/encoding/Adobe-Japan1-PS-V
  • pdf2html_cmd/encoding/Adobe-Japan1-UCS2
  • pdf2html_cmd/encoding/Adobe-Korea1-H-CID
  • pdf2html_cmd/encoding/Adobe-Korea1-H-Host
  • pdf2html_cmd/encoding/Adobe-Korea1-H-Mac
  • pdf2html_cmd/encoding/Adobe-Korea1-KSCms-UHC
  • pdf2html_cmd/encoding/Adobe-Korea1-KSCpc-EUC
  • pdf2html_cmd/encoding/Adobe-Korea1-UCS2
  • pdf2html_cmd/encoding/B5pc-H
  • pdf2html_cmd/encoding/B5pc-UCS2
  • pdf2html_cmd/encoding/B5pc-UCS2C
  • pdf2html_cmd/encoding/B5pc-V
  • pdf2html_cmd/encoding/CNS-EUC-H
  • pdf2html_cmd/encoding/CNS-EUC-V
  • pdf2html_cmd/encoding/ETHK-B5-H
  • pdf2html_cmd/encoding/ETHK-B5-V
  • pdf2html_cmd/encoding/ETen-B5-H
  • pdf2html_cmd/encoding/ETen-B5-UCS2
  • pdf2html_cmd/encoding/ETen-B5-V
  • pdf2html_cmd/encoding/ETenms-B5-H
  • pdf2html_cmd/encoding/ETenms-B5-V
  • pdf2html_cmd/encoding/EUC-H
  • pdf2html_cmd/encoding/EUC-V
  • pdf2html_cmd/encoding/Ext-RKSJ-H
  • pdf2html_cmd/encoding/Ext-RKSJ-V
  • pdf2html_cmd/encoding/GB-EUC-H
  • pdf2html_cmd/encoding/GB-EUC-V
  • pdf2html_cmd/encoding/GBK-EUC-H
  • pdf2html_cmd/encoding/GBK-EUC-UCS2
  • pdf2html_cmd/encoding/GBK-EUC-V
  • pdf2html_cmd/encoding/GBK2K-H
  • pdf2html_cmd/encoding/GBK2K-V
  • pdf2html_cmd/encoding/GBKp-EUC-H
  • pdf2html_cmd/encoding/GBKp-EUC-V
  • pdf2html_cmd/encoding/GBT-EUC-H
  • pdf2html_cmd/encoding/GBT-EUC-V
  • pdf2html_cmd/encoding/GBpc-EUC-H
  • pdf2html_cmd/encoding/GBpc-EUC-UCS2
  • pdf2html_cmd/encoding/GBpc-EUC-UCS2C
  • pdf2html_cmd/encoding/GBpc-EUC-V
  • pdf2html_cmd/encoding/H
  • pdf2html_cmd/encoding/HKdla-B5-H
  • pdf2html_cmd/encoding/HKdla-B5-V
  • pdf2html_cmd/encoding/HKdlb-B5-H
  • pdf2html_cmd/encoding/HKdlb-B5-V
  • pdf2html_cmd/encoding/HKgccs-B5-H
  • pdf2html_cmd/encoding/HKgccs-B5-V
  • pdf2html_cmd/encoding/HKm314-B5-H
  • pdf2html_cmd/encoding/HKm314-B5-V
  • pdf2html_cmd/encoding/HKm471-B5-H
  • pdf2html_cmd/encoding/HKm471-B5-V
  • pdf2html_cmd/encoding/HKscs-B5-H
  • pdf2html_cmd/encoding/HKscs-B5-V
  • pdf2html_cmd/encoding/Identity-H
  • pdf2html_cmd/encoding/Identity-V
  • pdf2html_cmd/encoding/KSC-EUC-H
  • pdf2html_cmd/encoding/KSC-EUC-V
  • pdf2html_cmd/encoding/KSCms-UHC-H
  • pdf2html_cmd/encoding/KSCms-UHC-HW-H
  • pdf2html_cmd/encoding/KSCms-UHC-HW-V
  • pdf2html_cmd/encoding/KSCms-UHC-UCS2
  • pdf2html_cmd/encoding/KSCms-UHC-V
  • pdf2html_cmd/encoding/KSCpc-EUC-H
  • pdf2html_cmd/encoding/KSCpc-EUC-UCS2
  • pdf2html_cmd/encoding/KSCpc-EUC-UCS2C
  • pdf2html_cmd/encoding/UCS2-90ms-RKSJ
  • pdf2html_cmd/encoding/UCS2-90pv-RKSJ
  • pdf2html_cmd/encoding/UCS2-B5pc
  • pdf2html_cmd/encoding/UCS2-ETen-B5
  • pdf2html_cmd/encoding/UCS2-GBK-EUC
  • pdf2html_cmd/encoding/UCS2-GBpc-EUC
  • pdf2html_cmd/encoding/UCS2-KSCms-UHC
  • pdf2html_cmd/encoding/UCS2-KSCpc-EUC
  • pdf2html_cmd/encoding/UniCNS-UCS2-H
  • pdf2html_cmd/encoding/UniCNS-UCS2-V
  • pdf2html_cmd/encoding/UniCNS-UTF16-H
  • pdf2html_cmd/encoding/UniCNS-UTF16-V
  • pdf2html_cmd/encoding/UniGB-UCS2-H
  • pdf2html_cmd/encoding/UniGB-UCS2-V
  • pdf2html_cmd/encoding/UniGB-UTF16-H
  • pdf2html_cmd/encoding/UniGB-UTF16-V
  • pdf2html_cmd/encoding/UniJIS-UCS2-H
  • pdf2html_cmd/encoding/UniJIS-UCS2-HW-H
  • pdf2html_cmd/encoding/UniJIS-UCS2-HW-V
  • pdf2html_cmd/encoding/UniJIS-UCS2-V
  • pdf2html_cmd/encoding/UniJIS-UTF16-H
  • pdf2html_cmd/encoding/UniJIS-UTF16-V
  • pdf2html_cmd/encoding/UniKS-UCS2-H
  • pdf2html_cmd/encoding/UniKS-UCS2-V
  • pdf2html_cmd/encoding/UniKS-UTF16-H
  • pdf2html_cmd/encoding/UniKS-UTF16-V
  • pdf2html_cmd/encoding/V
  • pdf2html_cmd/encoding/wincharsetffff-h
  • pdf2html_cmd/encoding/wincharsetffff-h2
  • pdf2html_cmd/encoding/wincharsetffff-v
  • pdf2html_cmd/encoding/wincharsetffff-v2
  • pdf2html_cmd/fontfile.map
  • pdf2html_cmd/htmlinf.txt
    .html
  • pdf2html_cmd/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • pdf2html_cmd/pdf2html.exe
    .exe windows:4 windows x86 arch:x86

    f2548b240da126f3382d6d1c74c7ec0e


    Headers

    Imports

    Sections

  • pdf2html_cmd/pg_back.gif
    .gif
  • pdf2html_cmd/pg_back2.gif
    .gif
  • pdf2html_cmd/pg_bblank.gif
    .gif
  • pdf2html_cmd/pg_bclosed.gif
    .gif
  • pdf2html_cmd/pg_bdoc.gif
    .gif
  • pdf2html_cmd/pg_blastnode.gif
    .gif
  • pdf2html_cmd/pg_bmark.gif
    .gif
  • pdf2html_cmd/pg_bmark.htm
    .html .js polyglot
  • pdf2html_cmd/pg_bmlastnode.gif
    .gif
  • pdf2html_cmd/pg_bmnode.gif
    .gif
  • pdf2html_cmd/pg_bnode.gif
    .gif
  • pdf2html_cmd/pg_bopen.gif
    .gif
  • pdf2html_cmd/pg_bplastnode.gif
    .gif
  • pdf2html_cmd/pg_bpnode.gif
    .gif
  • pdf2html_cmd/pg_bvertline.gif
    .gif
  • pdf2html_cmd/pg_end.gif
    .gif
  • pdf2html_cmd/pg_end2.gif
    .gif
  • pdf2html_cmd/pg_first.gif
    .gif
  • pdf2html_cmd/pg_first2.gif
    .gif
  • pdf2html_cmd/pg_fullscr.gif
    .gif
  • pdf2html_cmd/pg_hisback.gif
    .gif
  • pdf2html_cmd/pg_hisnext.gif
    .gif
  • pdf2html_cmd/pg_index.gif
    .gif
  • pdf2html_cmd/pg_index.htm
    .html .js polyglot
  • pdf2html_cmd/pg_lpane1.gif
    .gif
  • pdf2html_cmd/pg_lpane2.gif
    .gif
  • pdf2html_cmd/pg_nav.htm
    .html .js polyglot
  • pdf2html_cmd/pg_next.gif
    .gif
  • pdf2html_cmd/pg_next2.gif
    .gif
  • pdf2html_cmd/pg_page.gif
    .gif
  • pdf2html_cmd/pg_page2.gif
    .gif
  • pdf2html_cmd/pg_print.gif
    .gif
  • pdf2html_cmd/pg_zoomin.gif
    .gif
  • pdf2html_cmd/pg_zoomout.gif
    .gif
  • pdf2html_cmd/readme.txt
  • pdf2html_cmd/winfont.ini