General

  • Target

    46887979a694085474ba5b577765a324_JaffaCakes118

  • Size

    2.6MB

  • MD5

    46887979a694085474ba5b577765a324

  • SHA1

    eb4e3379d3ebc55accc13708793c7b02e5331f5e

  • SHA256

    4d0059453a785414b5004da18785c13b5e73e7b761ad4f85ec92146e7ae6e220

  • SHA512

    c98f30f4baaf2e38037ef342722726f707b8e944c6637a59e7e0c71e4f12f138fac574e8531107977285a77da8976d9f3ef058014a2bbf21a21c5705499e192d

  • SSDEEP

    49152:64e2Z4Ruw/8CYoZP9cZ4HcoH31px28yuPey1qUhbhAIkrkEQJzGQEji7zMX:aCaD/8C3Z1WqN7my1dh2IiJQJKQLa

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 46887979a694085474ba5b577765a324_JaffaCakes118
    .rar
  • Author.fab
  • FS4X.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Init4.sql
  • Readme.txt
  • TipOfDay.txt
  • Update3.sql
  • rpts/XLST_D2dAccount.xls
    .xls windows office2003
  • rpts/新云软件.url
    .url
  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    16892521697dfbd272f03ce06f9c1433


    Headers

    Imports

    Exports

    Sections