General

  • Target

    88d9a000e0410c28a6c6f64e7f733f65_JaffaCakes118

  • Size

    521KB

  • MD5

    88d9a000e0410c28a6c6f64e7f733f65

  • SHA1

    16a960ae204bf8409ce53c01593479b66ff2a4bb

  • SHA256

    91c4fb6b03d41ea91ecfe45cfd5879d2717c9a661c92fe49bccb2096d3331ed4

  • SHA512

    bf7b6f31290b39e823518499535b5ea2b199248713a5ba5eb92f386e923d50ff192dd15cccdf2c09c408d6c48f472888456f159f0441e8f2ccd865e0651ecb40

  • SSDEEP

    12288:Z4nej4X1Ta21qJHOKKHeQp4tTetq4wotJ8R9MQMRhCNBE8d:Z4nejeThkJuDeQOGnwmzRw

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 88d9a000e0410c28a6c6f64e7f733f65_JaffaCakes118
    .rar
  • Easy File & Folder Protector/cref.dlr
  • Easy File & Folder Protector/efpap.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Easy File & Folder Protector/efpp.cnt
  • Easy File & Folder Protector/efpp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Easy File & Folder Protector/efpp.hlp
  • Easy File & Folder Protector/readme.txt
  • Easy File & Folder Protector/安装说明.url
    .url