General

  • Target

    180ec4c86123d4e649f487d748a9558f_JaffaCakes118

  • Size

    1.9MB

  • MD5

    180ec4c86123d4e649f487d748a9558f

  • SHA1

    1f3d7af7c861d43240830a5f0bda89a903163454

  • SHA256

    8f9376e37bec823803c286ebc6d743c91b50f8f020575a9274fcb7b103479fb2

  • SHA512

    0df3ff8bb369e68d6a349a4ad5a7657576c24920fae0c7cb1f371fd6e8cd67efe8b7deeba5401f9d370dbc00481f8d92cc5b60ee4a6be4dc1fe0876043f2dc1b

  • SSDEEP

    49152:ivSiNj3oCrkcHLK3pbMUzuOzB/9ulE9mcG5vZ:KSiNkCrVHLK3pVz0E90tZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 180ec4c86123d4e649f487d748a9558f_JaffaCakes118
    .rar
  • theworld/!创e下载┆绿色软件天堂.URL
    .url
  • theworld/ImgCache/MouseGesture_0.bmp
  • theworld/ImgCache/MouseGesture_1.bmp
  • theworld/ImgCache/MouseGesture_10.bmp
  • theworld/ImgCache/MouseGesture_11.bmp
  • theworld/ImgCache/MouseGesture_12.bmp
  • theworld/ImgCache/MouseGesture_13.bmp
  • theworld/ImgCache/MouseGesture_14.bmp
  • theworld/ImgCache/MouseGesture_15.bmp
  • theworld/ImgCache/MouseGesture_16.bmp
  • theworld/ImgCache/MouseGesture_17.bmp
  • theworld/ImgCache/MouseGesture_18.bmp
  • theworld/ImgCache/MouseGesture_19.bmp
  • theworld/ImgCache/MouseGesture_2.bmp
  • theworld/ImgCache/MouseGesture_3.bmp
  • theworld/ImgCache/MouseGesture_4.bmp
  • theworld/ImgCache/MouseGesture_5.bmp
  • theworld/ImgCache/MouseGesture_6.bmp
  • theworld/ImgCache/MouseGesture_7.bmp
  • theworld/ImgCache/MouseGesture_8.bmp
  • theworld/ImgCache/MouseGesture_9.bmp
  • theworld/ImgCache/www.ce666.com_favicon.ico
  • theworld/ImgCache/www.eqifa.com_favicon.ico
  • theworld/ImgCache/www.ioage.com_favicon.ico
  • theworld/ImgCache/www.menscolor.cn_favicon.ico
  • theworld/TheWorld.ini
  • theworld/dailytips.ini
  • theworld/swf/cat.js
    .js
  • theworld/swf/iqiyi.swf
  • theworld/swf/player.swf
  • theworld/swf/tudou.swf
  • theworld/theworld.ac
  • theworld/theworld.exe
    .exe windows:4 windows x86 arch:x86

    529e31f77e52cbf0a3f800a64416df7b


    Headers

    Imports

    Sections

  • theworld/淘宝返现武林.URL
    .url