General

  • Target

    0386731150d3e92c4b7c4fcc292ff7e3_JaffaCakes118

  • Size

    54KB

  • MD5

    0386731150d3e92c4b7c4fcc292ff7e3

  • SHA1

    98a2fb70ddd561143acc5326b886cac1f0ba64a4

  • SHA256

    bc74ba5c7cacbad5a3be61a33d258e2495edba5940f02705717e71a5c0257bce

  • SHA512

    a7652497ea0425f8d788ba7377125acc65240bd64c38a51557ef9633315d0b3b9075519cdcd54c8d32b4ab13b34c62e3f093da5bcc78fac4c3ac53895283e7b1

  • SSDEEP

    1536:lUgJQZKej4NKkTpqPldpkt1PR4HTT4BAdOG3X0UQ4:vSZKU4NXE3G1Z4Hf42d/3XI4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0386731150d3e92c4b7c4fcc292ff7e3_JaffaCakes118
    .rar
  • ChangeIP/ChangeIP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ChangeIP/diskop.dll
    .dll windows:4 windows x86 arch:x86

    931c71206738414315d186c394349c62


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChangeIP/piaodown.com.url
    .url
  • ChangeIP/windisk.dll
    .dll windows:4 windows x86 arch:x86

    a72cb320db2ce95cabeca15e8658b4c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChangeIP/飘荡精品软件.url
    .url