General
-
Target
ab90746b1dbe7b4406f7eb47dd53ac79_JaffaCakes118
-
Size
3.7MB
-
MD5
ab90746b1dbe7b4406f7eb47dd53ac79
-
SHA1
5f1360552549b6307d203b3639004613d6458a4b
-
SHA256
4b1c61205b74992adc8046b4a09191d4bb77bfecd2bfb746cb3fd7057eaa76dd
-
SHA512
9897fb0ffa5d67e38caa70ba6d630c1b867e7c5835c8369f5bbb7f67976ab8b878f26be59624bfcd31850ac978fe372bddc28fa595913d864d9ce4f5b2818d75
-
SSDEEP
98304:ySA6mqfNLW6AlKdk///bcns2TAjWy6P1rQMHsDZGP:xARqQ6snIf86TtNP
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ab90746b1dbe7b4406f7eb47dd53ac79_JaffaCakes118
-
AngryMailer_EN_Free/Angry Mailer - Free Mass Email Sender - Fifty Thousand - Hundred Thousand Letters Everyday.url
-
AngryMailer_EN_Free/AngryMailer_Account_EMS_Random.com.txt
-
AngryMailer_EN_Free/AngryMailer_Account_EMS_Random.txt
-
AngryMailer_EN_Free/AngryMailer_EN_Free.exe
Headers
Sections
-
out.upx
Headers
Sections
-
AngryMailer_EN_Free/AngryMailer_EN_Free.virscan.org.txt
-
AngryMailer_EN_Free/AngryMailer_Help_EN.pdf
-
http://163.com
-
http://AngryMailer.com
-
http://angrymailer.com
-
http://en-USsinaen-US.com
-
http://mail.angrymailer.com
-
http://qq.com
-
http://smtp.qq.com
-
http://www.angrymailer.com/
-
-
AngryMailer_EN_Free/This software is not virus,some virus scanner is wrong, pls add to trust list, you can go to www.virscan.org to scan it.txt
-
AngryMailer_EN_Free/This software is not virus,some virus scanner is wrong, pls add to trust list.txt