Overview

overview

10

Static

static

3

6bc5ab7a2b...18.tar

windows7-x64

1

6bc5ab7a2b...18.tar

windows10-2004-x64

1

eFAX.CORPO...df.exe

windows7-x64

10

eFAX.CORPO...df.exe

windows10-2004-x64

10

vv/vv.pdf

windows7-x64

3

vv/vv.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6bc5ab7a2b6bfc1746e93b12813c942f_JaffaCakes118

  • Size

    156KB

  • MD5

    6bc5ab7a2b6bfc1746e93b12813c942f

  • SHA1

    6acd4c29e04cc6b3294b4d74d03d210bba906772

  • SHA256

    6fbf5abab7dbd2ed8c5b626b4b06162cce1831efe2103ebe96043db72dd61269

  • SHA512

    5e1b4bc58900cf55ebac3e1568e7023cf150fd7a447b6fcf3408064071aa828eb266f83632991e274035fd36243864ed2f3670a0ad84db39a0e735297a17cb54

  • SSDEEP

    3072:ul89tSKkKRayiGcgAsr6TdNQYlE4DpCY45wpK2nqILOZfw4BMB/y5vGgXqv1rEIm:SmtSaRayiAAy6nQ8lCe3l6ZI0MB/SbXr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bc5ab7a2b6bfc1746e93b12813c942f_JaffaCakes118
    .xz
  • 6bc5ab7a2b6bfc1746e93b12813c942f_JaffaCakes118
    .tar .zip polyglot
  • 未命名資料夾 4/vv.jar
    .zip
  • vv/virus.tar.gz
    .gz
  • virus.tar
    .tar .zip polyglot
  • virus/eFAX-57075ED4D5FA1184139D.pdf.zip
    .zip
  • eFAX.CORPORATE.personal.ID2EFR120091FRe1TT0932223545AEG32123434IP.new.pdf.exe
    .exe windows:4 windows x86 arch:x86

    8386021c2a13bfd33fc62b1557f4968e


    Headers

    Imports

    Sections

  • vv/vv.pdf
    .pdf