General

  • Target

    a5f1d010fcf29fb7c3cde48c0b5583b9_JaffaCakes118

  • Size

    4.1MB

  • MD5

    a5f1d010fcf29fb7c3cde48c0b5583b9

  • SHA1

    d4b6cd39e94713095d680b4f069c30633c9b4453

  • SHA256

    399970b63645ae4450987619175af7bf4d6b9f5566b3cec96ab70ec2b61ed599

  • SHA512

    564510aeb42931dad3bea73d53c90173724f97f3b15ec2b3525c9a69dd498ffb47be220a4f90770569627aa4c2974269ef708688d31e93ebdde89a7f72793426

  • SSDEEP

    98304:fIaCEXVj4/d7ck1I3FKbRQoroxq3qYfW1TQWvBt5CO8Q8Em:nN4/d7ck1yFK9cxq3j4ptgOSh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a5f1d010fcf29fb7c3cde48c0b5583b9_JaffaCakes118
    .rar
  • 最新列车时刻表/Thumbs.db
  • 最新列车时刻表/fj.bmp
  • 最新列车时刻表/gj.bmp
  • 最新列车时刻表/hc.bmp
  • 最新列车时刻表/huoch.dll
    .exe windows:4 windows x86 arch:x86

    73ec795c6c369c6ce2c3b4c3f6477daa


    Headers

    Imports

    Sections

  • 最新列车时刻表/新云软件.url
    .url
  • 最新列车时刻表/最新列车时刻表.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections