General

  • Target

    52468b8f8dcc4477758da3f2a1c38dc0_JaffaCakes118

  • Size

    2.1MB

  • MD5

    52468b8f8dcc4477758da3f2a1c38dc0

  • SHA1

    dc8f49f64b19de9e5dc89c180090186c43798599

  • SHA256

    37f1759f88c5bfd8afe46c6aadc196503cc0cb4ff45fdff642ae0b2eb96192e2

  • SHA512

    ad5b7cd103129b0cb6d11eefce139b1d672b12b9f4301c2791c5447f3a3750759fb8bc0a9ee5fe9c9aabb49c0dbc25a3b7becbcafdfe69075fbba9fd444b1638

  • SSDEEP

    49152:eGkBt0IXNWJmetQ0gXSyWHRr1wOOtfntqhfE7b5:exbdOmCpTr1Mtftqi9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52468b8f8dcc4477758da3f2a1c38dc0_JaffaCakes118
    .zip
  • C_PAQ_3.0/C_PAQ_3.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • C_PAQ_3.0/reg.ini
  • C_PAQ_3.0/˵.txt
  • C_PAQ_3.0/ProxyCap_v302.rar
    .rar
  • ProxyCap 3.02 注册码.txt
  • ProxyCap_v302_汉化补丁.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 原版文件 pcap302_x86.msi
    .msi
  • 使用说明.txt