General

  • Target

    e20719e9c80dcd4de6f5b2b5324e36f9_JaffaCakes118

  • Size

    484KB

  • MD5

    e20719e9c80dcd4de6f5b2b5324e36f9

  • SHA1

    dce821289eafd5d6271a631887e27247f0876124

  • SHA256

    9b4c0dc044a688eaf13e4e0bb5cd716114a9e3ecede0082bae822fbde5b0f93c

  • SHA512

    1b67ddb5836b98d97e8631c9cbbc0e14eb5941dfa9ca8c1fd6045298f8d7f0bd8672f58cbfd668e7a677f5626822d1beeddecb87dc9723b33fc9bef86db0f8e8

  • SSDEEP

    12288:9KRLhceeA7gwb2WWF55nXAyRcNOYzaFT+:9KRLhyxnbR2OqUT+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e20719e9c80dcd4de6f5b2b5324e36f9_JaffaCakes118
    .rar
  • ThunderSt0rm/ThunderSt0rm.dll
    .dll windows:6 windows x86 arch:x86

    5ae9b1e49e9381077f41b7491b0241b1


    Headers

    Imports

    Sections

  • ThunderSt0rm/Xenos64.exe
    .exe windows:6 windows x64 arch:x64

    9402385ad14f277470c2c187b7cd7e08


    Headers

    Imports

    Exports

    Sections

  • Прочти!.txt