General

  • Target

    cef9df138e92c2483cb2e24b14dcbc94_JaffaCakes118

  • Size

    279KB

  • MD5

    cef9df138e92c2483cb2e24b14dcbc94

  • SHA1

    bc9b8ea67ee3abda700b670fab7c4c5b510e87dc

  • SHA256

    65d571a354695c63f5fb91860957186ebcaa04bead7351c1d817d12bc07ab166

  • SHA512

    fb9280fbc39bd447d246675babdeccec4fa98a09f4727544224bb3b7919664c8d61d46601580a4f6ea381abac3d2339c5fbf3b4719b5222a0ffe6d1313f69395

  • SSDEEP

    6144:Em+ommPh3QpftCU17OPUZhPZaA1L4vFDKYfjTanCyJj4KEPn0Ie4Fc1dOT:M6mgUUPex1L4YSjTanCyJj4xP84F0ET

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cef9df138e92c2483cb2e24b14dcbc94_JaffaCakes118
    .rar
  • Piaodown_duoyucssqingchu/duoyucssqingchu/list.ini
  • Piaodown_duoyucssqingchu/duoyucssqingchu/多余css清除工具 1.1.exe
    .exe windows:4 windows x86 arch:x86

    48f45b72ad3754b1536450386dd7fbfd


    Headers

    Imports

    Sections

  • Piaodown_duoyucssqingchu/duoyucssqingchu/飘荡软件.url
    .url
  • Piaodown_duoyucssqingchu/飘荡软件.url
    .url