General

  • Target

    ff95f0cc99ddd0eac33956b9ea316b24_JaffaCakes118

  • Size

    1.3MB

  • MD5

    ff95f0cc99ddd0eac33956b9ea316b24

  • SHA1

    ddd2519a99d3b682f4fd0e5e615f2ba052417b65

  • SHA256

    9f0f65ac873a912dbac3ae7c93254a2a4df51f2747998d5c4d10dd205ebd0410

  • SHA512

    45d138ec26f44989c7f1cc9579ea8256accfa5a8a158a5d5e36578eb9c275524cfeeb6be11ef2081a6f485e1d4f9c3f14cff814c268643c7bc41f7ece4ce41d4

  • SSDEEP

    24576:S58n/DD9MaiVBdI6uAe7Jzt6o/Z9ovTwwvK2gL8OyRvY50H98+BJGU5N7:S58nrBC+62BgMZObwD7L8OtSO+/5N7

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 8 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • ff95f0cc99ddd0eac33956b9ea316b24_JaffaCakes118
    .rar
  • MF/Easick.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/MF.ini
  • MF/MFP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/MFS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/MemoryFree.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MF/RegLocked.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/RegUnLocked.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/USB.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/UnInstall.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MF/新云软件.url
    .url