General

  • Target

    8cb519c08511882714383688c7833f1a_JaffaCakes118

  • Size

    2.9MB

  • MD5

    8cb519c08511882714383688c7833f1a

  • SHA1

    83ba71d927c781fee70d21d1817c918305aa248f

  • SHA256

    466b2cdbf15e8326877f71d6d93669ebbcf0e76c67ef860781f7979709799f81

  • SHA512

    73b61a2d544692266a0add6e6459b49a4f6528742be1258492fdb91f7c31d10fbba2bd3717e7b594b43a61fe5163aee0f87f1fd104dbf38f27c570c3eeb66746

  • SSDEEP

    49152:RROPrPU6k9HijHWVth4LOIUmNk3o1SGGcvlEK3QeLLQkLRrt4UM9UP2:RWPHmcWmLvN0PcbJLf55G

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cb519c08511882714383688c7833f1a_JaffaCakes118
    .rar
  • XlightFTPServerEN/Keygen.exe
    .exe windows:4 windows x86 arch:x86

    a37687be334ff448f9d6b6fb23bf162f


    Headers

    Imports

    Sections

  • XlightFTPServerEN/MessageDll.dll
    .dll windows:4 windows x86 arch:x86

    64315c1b14173897a717e1d243a92fb1


    Headers

    Imports

    Sections

  • XlightFTPServerEN/Patch.exe
    .exe windows:5 windows x86 arch:x86

    9af13cdad1a0d0471947eb93d949164c


    Headers

    Imports

    Exports

    Sections

  • XlightFTPServerEN/lang/language_en.ini
  • XlightFTPServerEN/lang/language_fr.ini
  • XlightFTPServerEN/lang/language_jp.ini
  • XlightFTPServerEN/ldap/AD-xlightFTPdUser-update.ldif
  • XlightFTPServerEN/ldap/AD-xlightFTPdUser.ldif
  • XlightFTPServerEN/ldap/eDirectory-xlightFTPdUser.ldif
  • XlightFTPServerEN/ldap/xlightFTPdUser.ldif
  • XlightFTPServerEN/ldap/xlightFTPdUser.schema
  • XlightFTPServerEN/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • XlightFTPServerEN/odbc/odbc_tables.sql
  • XlightFTPServerEN/remote_admin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • XlightFTPServerEN/xlight.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • XlightFTPServerEN/xlight_help.chm
    .chm
  • XlightFTPServerEN/河源下载站-cngr.cn.url
    .url
  • XlightFTPServerEN/淘宝热卖.url
    .url