General

  • Target

    JaffaCakes118_fd93b2ad4fe7d789cbd26c84f657e8eea418cc3fc8631ad52b8a197d06387c87

  • Size

    3.7MB

  • MD5

    97c869f246c2828be42d007003ddf77e

  • SHA1

    7963231154c1fd76a38f8f0ea5e965ad04ac12da

  • SHA256

    fd93b2ad4fe7d789cbd26c84f657e8eea418cc3fc8631ad52b8a197d06387c87

  • SHA512

    cae307c832b75a49704428f5285ff95efcdf74c01193920c94716fc21df0f60b328ef47208240263749e45095c36f795794eb8e1753c04d349fdfa87fd985614

  • SSDEEP

    98304:pwxG5NfYebWQJzl6ogplLjy6DtaQZFMQgDGh:pwMvZXClR1MM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_fd93b2ad4fe7d789cbd26c84f657e8eea418cc3fc8631ad52b8a197d06387c87
    .zip
  • msvcr71.ocx.7z
    .7z

    Password: infected

  • msvcr71.ocx
  • msvcr710x64.sys.7z
    .7z

    Password: infected

  • msvcr710x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • sqlservr.exe.7z
    .7z

    Password: infected

  • sqlservr.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections