General

  • Target

    0faf375e71c471e6065639d1355d02da_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0faf375e71c471e6065639d1355d02da

  • SHA1

    480baf56a559a69cd530c27e9cfc24cf4c4b00ab

  • SHA256

    b38c73bccb56dae0feff9cff8c17eedd99faaf16501a50fa41337a7fb923f254

  • SHA512

    5a516b099170a12fd873c29bfe28b19e8f871061ba3a51bc9ced25a007153ec6f408a033ce63461f8dd1cd8d58a4397975cfc8144a5411da53773eff360b638c

  • SSDEEP

    24576:X0QyDDopwJqk7V7D2X7DWOBYCN4Z+pN0AKmPdX9yeEbPxQFekdfmr4rmA6L3La3v:XSDDo+ZxD2X7DWOByLAKQ9y7TxeZmQ6e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 0faf375e71c471e6065639d1355d02da_JaffaCakes118
    .rar
  • Priest/ChatLogs/64onur6464.html
    .html
  • Priest/ChatLogs/GlaxoWomanRoyanS.html
    .html
  • Priest/ChatLogs/KaRaTaMuS.html
    .html
  • Priest/ChatLogs/MrStyLeOfDang3r.html
    .html
  • Priest/ChatLogs/MrStyLeOfDanqer.html
    .html
  • Priest/ChatLogs/absyrtos.html
    .html
  • Priest/ChatLogs/arhslayer.html
    .html
  • Priest/ChatLogs/aristotalessll.html
    .html
  • Priest/ChatLogs/bab4xxbab4197777.html
    .html
  • Priest/ChatLogs/lPhanToSa.html
    .html
  • Priest/ChatLogs/lllaristotalesslll.html
    .html
  • Priest/ChatLogs/onurcabcgst.html
    .html
  • Priest/Log_Events.txt
  • Priest/Log_Loot.txt
  • Priest/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
    .xml
  • Priest/Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • Priest/Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Priest/Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Priest/alarm.wav
  • Priest/notepad.dll
    .dll windows:5 windows x86 arch:x86

    1374e4909bea281caf683fd9947f9c45


    Headers

    Imports

    Sections

  • Priest/notepad.exe
    .exe windows:5 windows x86 arch:x86

    3d5273d9c57ab2cddd967e110ee2536b


    Headers

    Imports

    Sections

  • Priest/notepad.ini
  • Priest/notepad_Loot.ini