General

  • Target

    fd9d76f1c8634d163dc96b3e5cdcd88a_JaffaCakes118

  • Size

    166KB

  • MD5

    fd9d76f1c8634d163dc96b3e5cdcd88a

  • SHA1

    db83cc50a617058eafd10559c7db2f7815cbd2de

  • SHA256

    09375101ab93f54b1cfdae6cbce2c6cf6210757dea63a996f693ea4d72259a50

  • SHA512

    6540ac90ea1994e0bdb861574091f3221f775c51eee84ee4bc01a7ee22f43926408c19e67ac9d7ae95187397d8b69d87c50b7a208feffbed8d29f5ba1fbfc490

  • SSDEEP

    3072:Qd5Y7mubij/E1x6JqOabDhcBx88hO//KZPLSfdj0YdQvfx0uxRcF0:U5YfG/Ev6UOa2o/KlLEjYyuxq6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd9d76f1c8634d163dc96b3e5cdcd88a_JaffaCakes118
    .rar
  • HA_Filemon7.02_yfy/FILEMON.HLP
  • HA_Filemon7.02_yfy/Filemon.exe
    .exe windows:4 windows x86 arch:x86

    4175e535a41900f94dcefa636eb6e691


    Headers

    Imports

    Sections

  • HA_Filemon7.02_yfy/README.TXT
  • HA_Filemon7.02_yfy/下载说明.htm
    .html .js polyglot
  • HA_Filemon7.02_yfy/汉化说明.txt
  • 下载说明.htm
    .html .js polyglot