General

  • Target

    ab2ca670dfa6ecfc1e5a5be0bd9cd0be_JaffaCakes118

  • Size

    156KB

  • MD5

    ab2ca670dfa6ecfc1e5a5be0bd9cd0be

  • SHA1

    8dfa1f36ce0272820e4cebf443631b75d9d374e6

  • SHA256

    e67577b236e85bf80fa572e58a05109dbf40e886bbd0210cf7536a33091014bd

  • SHA512

    ff589b118fa8749e6c9275121e80339b52cbd59d6dc82176b58216106e311d992e0746335609eb417c681c04c05939e3b25eb6b73ee1f41150b1d0fa0f4688a8

  • SSDEEP

    3072:Kv8xwVfT0FNbgCO9jBirs/j0Cy3PKdBM1g+cQ2IdCWb+vqzyktJ:K0udT0FNb2bs3PIBAg+7CWbzb

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab2ca670dfa6ecfc1e5a5be0bd9cd0be_JaffaCakes118
    .rar
  • 4639600/+.bmp
  • 4639600/CsPost.cfg
  • 4639600/CsPost.dof
  • 4639600/CsPost.dpr
  • 4639600/CsPost.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 4639600/CsPost.res
  • 4639600/Icon.ico
  • 4639600/MainForm.dcu
  • 4639600/MainForm.ddp
  • 4639600/MainForm.dfm
  • 4639600/MainForm.pas
  • 4639600/下载说明.htm
    .html .js polyglot