General

  • Target

    22c7e118770a4f4ac8493fbd8db4b130_JaffaCakes118

  • Size

    17.3MB

  • MD5

    22c7e118770a4f4ac8493fbd8db4b130

  • SHA1

    92bfe8570383cc4e2788a080a39bc10ce0b3926c

  • SHA256

    d5a03a6af0086aa56be2ec06f056f4661cf07bd20d6faf77c6d2e65ce7241d46

  • SHA512

    fe489de481f1cb08110b1e3860383dcf0d31349a58c60f735983d24e6e5b4b5a75f02e7ddbcefcfc250b24ce678df4d4f9d6c1ae7a1ce0560a24286d5816a6be

  • SSDEEP

    393216:tW14KsevQaAyy9PsN+rhC4U6jAu+gnprF+B4SAAVGbD3:tWD6yy9PsNr6Ln1FQ4Ko3

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22c7e118770a4f4ac8493fbd8db4b130_JaffaCakes118
    .rar
  • Faronics_DFS/DFStd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Faronics_DFS/Documentation/Deutsch/DFS_Manual_G.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library.

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/English/DFS_Manual.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/English/IGS_Manual.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/deepfreezeThe

    • http://www.faronics.com/doc/DF6Ent_Manual.pdf

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/Espanol/DFS_Manual_S.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/Francais/DFS_Manual_F.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/Japanese/DFS_Manual_J.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Documentation/Simplified Chinese/DFS_Manual_C.pdf
    .pdf
    • http://faronics.com

    • http://www.faronics.com

    • http://www.faronics.com/library

  • Adobe PDF Preset 1.joboptions
  • Faronics_DFS/Faronics_IGS.exe
    .exe windows:4 windows x86 arch:x86

    028937259ba67f253f37eb365114b165


    Code Sign

    Headers

    Imports

    Sections

  • Faronics_DFS/新云软件.url
    .url