Overview

overview

3

Static

static

3

Password_3...rd.exe

windows7-x64

3

Password_3...rd.exe

windows10-2004-x64

3

Password_3...ss.exe

windows7-x64

3

Password_3...ss.exe

windows10-2004-x64

3

Password_3...NT.exe

windows7-x64

1

Password_3...NT.exe

windows10-2004-x64

3

Password_3...ss.chm

windows7-x64

1

Password_3...ss.chm

windows10-2004-x64

1

Password_3...��.url

windows7-x64

1

Password_3...��.url

windows10-2004-x64

1

Password_3...��.url

windows7-x64

1

Password_3...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4342b1a8b809fce44e959db9991e75de_JaffaCakes118

  • Size

    547KB

  • MD5

    4342b1a8b809fce44e959db9991e75de

  • SHA1

    5369afe78bc0548ff33f770bfe7cfbe361c92184

  • SHA256

    d2bd936b69fe162d1f9cf85936cf82f4f5220001b7241478c76ea5fccd67880d

  • SHA512

    18214c02bc87aa6b0ce504d0dcfdbf5e38eb2dee5c1fd80fc89a985d5bf43c0b090b47f418b6d883ce9f4e06cb68548b60791f0ea58ff0b1f4fac2fec286a108

  • SSDEEP

    12288:QboKZm+hCmrJunqMaZFaXN+j4V0ObsJ+6RF:QEKLhxC8FaXN+j4Vn0xRF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4342b1a8b809fce44e959db9991e75de_JaffaCakes118
    .rar
  • Password_33LC/Password.exe
    .exe windows:4 windows x86 arch:x86

    1490557e456cffdae9595a96821632a7


    Headers

    Imports

    Sections

  • Password_33LC/Password.ini
  • Password_33LC/ViewPass.exe
    .exe windows:4 windows x86 arch:x86

    a1920ad1b14d1723c6ec510dc0482abe


    Headers

    Imports

    Sections

  • Password_33LC/aRingNT.exe
    .exe windows:4 windows x86 arch:x86

    e1d56ecd11c6b73b99d4a0408f3cbd23


    Headers

    Imports

    Sections

  • Password_33LC/viewpass.chm
    .chm
  • Password_33LC/绿茶系统.url
    .url
  • Password_33LC/绿茶网址导航.url
    .url