General

  • Target

    8471fb95a0d6da0b939b2eab31314add_JaffaCakes118

  • Size

    456KB

  • MD5

    8471fb95a0d6da0b939b2eab31314add

  • SHA1

    ebc4301e95848cf92600afeec5fd6d61aad120f4

  • SHA256

    b7e5aa3cfeeff2feb000a9330f38bc76af35d6c9aaee42349d0420353e1ce6ea

  • SHA512

    8df7fcb81705322999c49d68d727b59a47bea8eeddd8426cabe56e844bea63ca949f60f25f66bbff42823c742e75e3c9cd0ed4131f53c158207fe2df63290c82

  • SSDEEP

    6144:1o4XdSc5Lc+46C0+ph29Cz2obbGq9PT3ugVZ3hWW4h5r143TISPsSp3IatJF44ws:1VzNTV+pAMdbXMgVZ2B43sSpLk1A1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8471fb95a0d6da0b939b2eab31314add_JaffaCakes118
    .rar
  • 驱动防火墙终结者/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    8c3f4e70b20ae334f3d2ac5a21c94f0b


    Headers

    Imports

    Exports

    Sections

  • 驱动防火墙终结者/使用说明.txt
  • 驱动防火墙终结者/使用说明图1.PNG
    .png
  • 驱动防火墙终结者/使用说明图2.PNG
    .png
  • 驱动防火墙终结者/新云软件.url
    .url
  • 驱动防火墙终结者/驱动防火墙终结者.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections