Overview

overview

7

Static

static

7

493525795/...ord.js

windows7-x64

3

493525795/...ord.js

windows10-2004-x64

3

493525795/...Pwd.js

windows7-x64

3

493525795/...Pwd.js

windows10-2004-x64

3

493525795/...ok.dll

windows7-x64

1

493525795/...ok.dll

windows10-2004-x64

1

493525795/Out/Pwd.exe

windows7-x64

1

493525795/Out/Pwd.exe

windows10-2004-x64

1

493525795/...rd.exe

windows7-x64

1

493525795/...rd.exe

windows10-2004-x64

1

493525795/Pwd/Pwd.js

windows7-x64

3

493525795/Pwd/Pwd.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    14c10c881f096fa6b77379b72aba5b79_JaffaCakes118

  • Size

    393KB

  • MD5

    14c10c881f096fa6b77379b72aba5b79

  • SHA1

    ac6782655bf9d4bce9869529e88de8f5e088cb16

  • SHA256

    49e9f046b73e76248a82724038323dbd600efaf7f7088b7d5b7cb22fe70652f1

  • SHA512

    af46e8a1758035b332461f7c2fc9f3a58d871d39ad37e34bdaf3bc23762dba5a3dffb36333d8bd68d0652b9b11cd59be3f46bc961f70b8074440a9d1744e5703

  • SSDEEP

    6144:qnw8N8fbtsavok90uFnpvdAeKMJN9JJGzCo8xwWZHQF5YTG+sy2BVSP+Q55W5Xe:qwp3F0up1HKoNHszCpxZHE5Y3245W5Xe

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 14c10c881f096fa6b77379b72aba5b79_JaffaCakes118
    .rar
  • 493525795/App/ReadPassword.bpr
    .xml
  • 493525795/App/ReadPassword.cpp
    .js
  • 493525795/App/ReadPassword.dsk
  • 493525795/App/ReadPassword.res
  • 493525795/App/fReadPwd.cpp
    .js
  • 493525795/App/fReadPwd.ddp
  • 493525795/App/fReadPwd.dfm
  • 493525795/App/fReadPwd.h
  • 493525795/Detecting Deadlocks in C++ .txt
  • 493525795/Dll/MouseHook.bpf
  • 493525795/Dll/MouseHook.bpr
    .xml
  • 493525795/Dll/MouseHook.cpp
  • 493525795/Dll/MouseHook.def
  • 493525795/Dll/MouseHook.res
  • 493525795/Out/MouseHook.dll
    .dll windows:4 windows x86 arch:x86

    9566d464bcaf2019ccd5741988866bbd


    Headers

    Imports

    Exports

    Sections

  • 493525795/Out/Pwd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 493525795/Out/ReadPassword.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 493525795/Pwd/Debug/Pwd.obj
  • 493525795/Pwd/Debug/fPwd.obj
  • 493525795/Pwd/Pwd.bpr
    .xml
  • 493525795/Pwd/Pwd.cpp
    .js
  • 493525795/Pwd/Pwd.res
  • 493525795/Pwd/fPwd.cpp
  • 493525795/Pwd/fPwd.dfm
  • 493525795/Pwd/fPwd.h
  • 493525795/ReadPwd.bpg
  • 493525795/ReadPwd.dsk
  • 493525795/下载说明.htm
    .html .js polyglot