General

  • Target

    be5436823269c13a89e484f6fd170cf5_JaffaCakes118

  • Size

    13.1MB

  • MD5

    be5436823269c13a89e484f6fd170cf5

  • SHA1

    dce8a2b78dce6e1690cc82e988abe2c735efccdf

  • SHA256

    db81c0caa560bf8c21552fbafc3b2a2663ebdc6120030faccd9624c4310b9724

  • SHA512

    d6852f6a581a08b285453990b391dc4e72f9be7cb03cfd944c4ea3a98942e35c8345c6a891568f93f1cba771c9711eadfd50f815fba2209060f04de214f2a637

  • SSDEEP

    393216:zUW8tvM9CHZ4I5pg8aUV+ugSi8y26zxcY6PwKYK:zwwCb5pg8IugSVyHzxJ0we

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • be5436823269c13a89e484f6fd170cf5_JaffaCakes118
    .rar
  • Camtasia 9.1.5.16_汉化补丁_20190508110030.exe
    .exe windows:4 windows x86 arch:x86

    77981b5ba545434d9901140945938c3a


    Headers

    Imports

    Sections

  • Readme.txt
  • 新浪博客.url
    .url
  • 汉化捐赠-微信.jpg
    .jpg
    • https://wx.tenpay.com/f2f?t=AQAAAEIr9%2BWc1KjiQXRpM7DAmF0%3D

  • 汉化捐赠-支付宝.jpg
    .jpg
  • 汉化更新地址.url
    .url
  • 汉化更新网盘.url
    .url
  • 胡萝卜周博客.url
    .url