General

  • Target

    528ab4732099634399a44545b70a0d93_JaffaCakes118

  • Size

    573KB

  • MD5

    528ab4732099634399a44545b70a0d93

  • SHA1

    0d7a3116bb80334ed10f77d140f773821cdd7419

  • SHA256

    54bb51ccfb8bfb891c51a09bbed9d50f8e419265206b5c38d2105abef778d71b

  • SHA512

    a1d91581e7a1c975f450d7f1232ae52929005f99182238eb94f255fd287008d8eec2fb278f8422f5c3885e642e285c99a0f51c5bc692e6a1419fe08dbfe9091f

  • SSDEEP

    12288:lmQk2jdcXKs34E6J93B/bPO9vCA+9gofPutNzn9FsAVDE48TaIpMb:lmz2tEn2RBDPOFIg1zYODE4ma+g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 528ab4732099634399a44545b70a0d93_JaffaCakes118
    .zip
  • ECQ-PS/CheckHiddenProc.sys
    .sys windows:5 windows x86 arch:x86

    580a63d1ba3fc68b14e7759ded9a144d


    Headers

    Imports

    Sections

  • ECQ-PS/ECQ-PS.exe
    .exe windows:4 windows x86 arch:x86

    ebc1687ba51a0301712cff4631bcbc06


    Headers

    Imports

    Sections

  • ECQ-PS/KeyHook.dll
    .dll windows:4 windows x86 arch:x86

    3b20700bf1d54dce924bd2e8a46a20ad


    Headers

    Imports

    Exports

    Sections

  • ECQ-PS/Process.dat
  • ECQ-PS/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • ECQ-PS/ntdll.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ECQ-PS/pdh.dll
    .dll windows:5 windows x86 arch:x86

    c4e2786dfbb0ee2b91cd8776d29ffc8c


    Headers

    Imports

    Exports

    Sections

  • ECQ-PS/ʹ˵.txt
  • ECQ-PS/Դ.url
    .url