General

  • Target

    50e7acd8bf569e66de9b31a24d80eea1_JaffaCakes118

  • Size

    467KB

  • MD5

    50e7acd8bf569e66de9b31a24d80eea1

  • SHA1

    f6bb6d41f958adcaf43beefe1f8786e5e693a463

  • SHA256

    bbd73cf8f460e2586e199d19421f14b87fafbe4314d4ef36af3ad88091e14a70

  • SHA512

    3f3f715ba3c2189f60697b9915c98fb432390dd49c9b2f0563839ab2bff32d7b77f1c256731da96183046ae5c19cc77ca1fdb1d3fffe7291c1520cc6944f7697

  • SSDEEP

    12288:GeaDVScfEYu6dMvuHyMEgY8KPzRUVW50hBbqhhF+TAsg8:GeaxSccYu6dRohRMtqhhF+TAsH

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 50e7acd8bf569e66de9b31a24d80eea1_JaffaCakes118
    .zip
  • Thegrideon.Lotus.123.Password.v1.3_CRKEXE-FFF/123Pass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Thegrideon.Lotus.123.Password.v1.3_CRKEXE-FFF/FFF.NFO
  • Thegrideon.Lotus.123.Password.v1.3_CRKEXE-FFF/FILE_ID.DIZ
  • Thegrideon.Lotus.123.Password.v1.3_CRKEXE-FFF/armaccess.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • keygen.nfo