Overview

overview

7

Static

static

7

1301028567...gs.exe

windows7-x64

1

1301028567...gs.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    443389ead1753cf9deff71b2e5ddab90_JaffaCakes118

  • Size

    790KB

  • MD5

    443389ead1753cf9deff71b2e5ddab90

  • SHA1

    f08f3d4d6dabaf8060307869b0fe24721bba76d0

  • SHA256

    e9c132c59c19a16d2377576007d757429db597dc931f38241f0525c59204b597

  • SHA512

    27ad2b9bf24a56f638ffe84d6dbccea601ed8898d279a968c63797b066676379515c67ac6f886406c983ecbc7b590c80101590f815699e855783f4b3570cda8e

  • SSDEEP

    24576:6GlpW+DkU5NO6QcYMRhKjE9XWGIuH3bVNki:6EktI46XJRsaXWTMrVNF

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 443389ead1753cf9deff71b2e5ddab90_JaffaCakes118
    .rar
  • 1301028567/Fittings.cfg
  • 1301028567/Fittings.dof
  • 1301028567/Fittings.dpr
  • 1301028567/Fittings.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1301028567/Fittings.res
  • 1301028567/UnitCompany.dcu
  • 1301028567/UnitCompany.ddp
  • 1301028567/UnitCompany.dfm
  • 1301028567/UnitCompany.pas
  • 1301028567/UnitDM.dcu
  • 1301028567/UnitDM.ddp
  • 1301028567/UnitDM.dfm
  • 1301028567/UnitDM.pas
  • 1301028567/UnitEdit.dcu
  • 1301028567/UnitEdit.ddp
  • 1301028567/UnitEdit.dfm
  • 1301028567/UnitEdit.pas
  • 1301028567/UnitEditCompany.dcu
  • 1301028567/UnitEditCompany.ddp
  • 1301028567/UnitEditCompany.dfm
  • 1301028567/UnitEditCompany.pas
  • 1301028567/UnitEditFittings.dcu
  • 1301028567/UnitEditFittings.ddp
  • 1301028567/UnitEditFittings.dfm
  • 1301028567/UnitEditFittings.pas
  • 1301028567/UnitFittings.dcu
  • 1301028567/UnitFittings.ddp
  • 1301028567/UnitFittings.dfm
  • 1301028567/UnitFittings.pas
  • 1301028567/UnitMain.dcu
  • 1301028567/UnitMain.ddp
  • 1301028567/UnitMain.dfm
  • 1301028567/UnitMain.pas
  • 1301028567/fittings.frf
  • 1301028567/fittings.mdb
  • 1301028567/下载说明.htm
    .html .js polyglot