General

  • Target

    c13cd5d4ab28737c04a0c7b4f71384f1_JaffaCakes118

  • Size

    25KB

  • MD5

    c13cd5d4ab28737c04a0c7b4f71384f1

  • SHA1

    b58126f6979b3a1ba360e4ffec72ca8604d53842

  • SHA256

    8019baba73618051c6cc1f546135a73e2c4aac1ae484603851ddb678b9fe5634

  • SHA512

    bbbf37cd1f937a40adb925060969deab63749831ce7a6f9f8015c440fd5278ad13ba9534b82f2bd8ad77dd91d4216591f1c7ceeb09cc070aa33eae5d23bedc57

  • SSDEEP

    768:MCAEl9uN3hmSFn2E5dUxfKfuV9bC31FTWq:TAEl9uN3IbECfKfur+31VX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c13cd5d4ab28737c04a0c7b4f71384f1_JaffaCakes118
    .rar
  • zfgh-v1.0/字符批量替换精灵.exe
    .exe windows:4 windows x86 arch:x86

    9e3d7bdd54b07c7c752be2f81900bb61


    Headers

    Imports

    Sections

  • zfgh-v1.0/新云软件.url
    .url