Overview

overview

3

Static

static

3

HA_LeapFTP...TP.exe

windows7-x64

3

HA_LeapFTP...TP.exe

windows10-2004-x64

3

HA_LeapFTP....0.exe

windows7-x64

1

HA_LeapFTP....0.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18e02edbf93bfd004f0dd257f5904227_JaffaCakes118

  • Size

    392KB

  • MD5

    18e02edbf93bfd004f0dd257f5904227

  • SHA1

    4141624a3de6bd674e5b6e6b1a2f96a8c30536c1

  • SHA256

    82a74191539ee3c6e086d1fa3506a85fd8f7da80659fb9c6dd86e548306be374

  • SHA512

    f17a00de1ab67c210ee08e05c5ecc1e8f377dd67e9ab0d86fab3b04b706b5a76476767a2fb67c1bbcbcec3f9f09755665a4820a7180df5c7bd81a0f2556013e2

  • SSDEEP

    6144:3Nfe5bpqs4mF/Q6ADn/FE9BzAwKw4RHF2cIYW1FFKSz/DTjsMtchhhAue1nIGqsJ:i8U/Q6ADn+4Vl2c9WLv16eGGsU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 18e02edbf93bfd004f0dd257f5904227_JaffaCakes118
    .rar
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/LeapFTP.HLP
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/LeapFTP.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/NewsBar_2.0.exe
    .exe windows:4 windows x86 arch:x86

    67786568aeb8a5c5b3133fa18e284b0b


    Headers

    Imports

    Sections

  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/README.TXT
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/SITES.INI
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/error.log
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/key.reg
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/leapftp.ini
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/qfile.dat
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/stats.dat
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/whatsnew.txt
  • HA_LeapFTP2.7.5.610_yfy_final/HA_LeapFTP 2.7.5.610_yfy_final/读我先.txt