General

  • Target

    074b5aeec2ae5c9363d4b8eed8357c91_JaffaCakes118

  • Size

    1.2MB

  • MD5

    074b5aeec2ae5c9363d4b8eed8357c91

  • SHA1

    444cae6fdd5d6799823a45dcb0af483488cdfdb0

  • SHA256

    e1401ec50ce69a4dcdeac71edf3d56891d7b88161651e931a75408de49184394

  • SHA512

    aefbe445fbe485c34a5864b83a5e38612e86fe536f39c7d3d1666bf59686c6dbfc0be39de349e1268bb5d892161670cb2b30ba8a0c1b6b58c8ac4f584510ec8e

  • SSDEEP

    24576:deddjH/46Xd19J57G+c/OjcHYjge/DZIFMmkknEjN:wPt1pBc/AcHYjH/iNxSN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 074b5aeec2ae5c9363d4b8eed8357c91_JaffaCakes118
    .rar
  • Serial.txt
  • Xlight/MessageDll.dll
    .dll windows:4 windows x86 arch:x86

    64315c1b14173897a717e1d243a92fb1


    Headers

    Imports

    Sections

  • Xlight/lang/language_en.ini
  • Xlight/lang/language_hu.ini
  • Xlight/ldap/AD-xlightFTPdUser-update.ldif
  • Xlight/ldap/AD-xlightFTPdUser.ldif
  • Xlight/ldap/eDirectory-xlightFTPdUser.ldif
  • Xlight/ldap/xlightFTPdUser.ldif
  • Xlight/ldap/xlightFTPdUser.schema
  • Xlight/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Xlight/odbc/odbc_tables.sql
  • Xlight/remote_admin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Xlight/xlight.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Xlight/xlight_help.chm
    .chm