General

  • Target

    8785259ba1288d5851f636a9e88843b9_JaffaCakes118

  • Size

    3.2MB

  • MD5

    8785259ba1288d5851f636a9e88843b9

  • SHA1

    d2262cb0a7501f7256357345379d7f8844ec5d78

  • SHA256

    7457e367c398ab8cfd6050409bf480629b119f2e9f73d50274855014b5b44a26

  • SHA512

    7ba85fbb9053be07b0b5736cc4d40fc89890d78f540c0fbb50de1d185c9affe0e1df1e77ab75b1eefbb55b3df8d01d5b3e36b36fec25b3f75309c30305ce8c79

  • SSDEEP

    49152:8LLqVWXSkScWMLTZxkGtjBX+dpqf1JBNKrqV48nGXs0BRVCjRDFgzvxOfSTxKms0:MLqTk/n0Gtj9+LO/TKeaMCR87gz4f0oM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8785259ba1288d5851f636a9e88843b9_JaffaCakes118
    .rar
  • IP域名所在地批量查询/IPAddressLookup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • IP域名所在地批量查询/QQWry.Dat
  • IP域名所在地批量查询/ShowIP.exe
    .exe windows:4 windows x86 arch:x86

    77f2a6b3e475e55480b0129029e9b348


    Headers

    Imports

    Exports

    Sections

  • IP域名所在地批量查询/说明.txt