General

  • Target

    f0a13988e9f5866f4b985f03b025fd03_JaffaCakes118

  • Size

    4.1MB

  • MD5

    f0a13988e9f5866f4b985f03b025fd03

  • SHA1

    b98792def73ecb84aad381821dfa94d220e2e033

  • SHA256

    eca93c0ee5bb22223f8d91210df8f4c39f2166c6f1031f181fa3a5d7974784fd

  • SHA512

    7a71798e7a9caf01766c169da0503bcb4e3c142de3edcc6cbfa0cdc25b9be7f801c9c29a671edf32361eec8c9449f86f756d973b9334518b452037a4254b8aad

  • SSDEEP

    98304:6X8tS0xQ362QExG9rwnFlFXw9+DJhkxyxprZFaWwwJg9a+hcwPJ:ySS0xQ5o90HFA9WhkWplUWzN+hvJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • f0a13988e9f5866f4b985f03b025fd03_JaffaCakes118
    .rar
  • FTPRush.exe
    .exe windows:1 windows x86 arch:x86

    5b36115ff362711943f368adb695e60e


    Headers

    Imports

    Sections

  • FtpRush.pac
  • License.txt
  • Readme.txt
  • RushCmd.xml
  • RushInit.lib
  • RushSite.xml
  • RushSrpt.prt
  • Rushicon.lib
  • UnRAR.exe
    .exe windows:4 windows x86 arch:x86

    cf6ca145896f9d37f7f4799cce56ed2f


    Headers

    Imports

    Exports

    Sections

  • UpdRush.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • forum.url
  • ftprush.chm
    .chm
  • language/Arabic.lng
  • language/Brazilian Portuguese.lng
  • language/Bulgarian.lng
  • language/Czech.lng
  • language/Danish.lng
  • language/Dutch.lng
  • language/English.lng
  • language/Finnish.lng
  • language/French.lng
  • language/German.lng
    .ps1
  • language/Hungarian.lng
  • language/Italian.lng
  • language/Korean.lng
  • language/Polish.lng
  • language/Russian.lng
  • language/Simplified Chinese.lng
  • language/Slovak.lng
  • language/Spanish.lng
  • language/Swedish.lng
  • language/Traditional Chinese.lng
  • language/Ukrainian.lng
  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    3b00f7b635433f5bf1a2c503ecf28837


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    2b9f7708f31b17eb58d445b129f4862f


    Headers

    Imports

    Exports

    Sections

  • website.url
  • 安装说明.url
    .url