General

  • Target

    3e6264f1c85eada0f4ccb021812951b2

  • Size

    4.6MB

  • MD5

    3e6264f1c85eada0f4ccb021812951b2

  • SHA1

    422090a9ab17fe56cadf74a5ae7e9856f80dfe1b

  • SHA256

    4680636bfcc98918a3c3f247d6717977b552600a8bd6ad2921ab384ea31f11aa

  • SHA512

    562ed1513d72fd574e562fbac3de3187e1d8329bd02f2c48baf52a3b13d07995a12843be701c698074ff29cb8c038745023425861dcf319091a7762530de6030

  • SSDEEP

    98304:/wgvG7Af7NjzXC1x8dF2+mDrZwc3fzcyw9bQNkMcv+60dc3jMq8dNugP:U7E79X8tf1fzhBNkPf0dc34qhY

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e6264f1c85eada0f4ccb021812951b2
    .rar
  • DATA/Metro.htm
  • DATA/Phone.htm
  • DATA/StarEnc.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • DATA/StarEnc.htm
    .html
  • DATA/StarEnc.swf
  • DATA/Timeex.htm
  • DATA/Worlda.htm
  • DATA/Wsdn_StarOCRM.mdb
  • DATA/calendar.mht
    .eml .js polyglot
  • DATA/下载说明.htm
    .html .js polyglot
  • IMAGE/Mail1.ico
  • IMAGE/Mail2.ico
  • IMAGE/Mail3.ico
  • IMAGE/Mail4.ico
  • IMAGE/Mail5.ico
  • IMAGE/Thumbs.db
  • IMAGE/top1.gif
    .gif
  • IMAGE/top2.gif
    .gif
  • IMAGE/top3.gif
    .gif
  • IMAGE/top4.gif
    .gif
  • IMAGE/top5.gif
    .gif
  • IMAGE/top6.gif
    .gif
  • IMAGE/top7.gif
    .gif
  • IMAGE/下载说明.htm
    .html .js polyglot
  • StarCRM.chm
    .chm
  • StarCRM.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Templates/Action.xls
    .xls windows office2003
  • Templates/BuyOrder.xls
    .xls windows office2003
  • Templates/BuyOrderO.xls
    .xls windows office2003
  • Templates/BuyOrderS.xls
    .xls windows office2003
  • Templates/PriceRep.xls
    .xls windows office2003
  • Templates/SaleO.xls
    .xls windows office2003
  • Templates/SalePre.xls
    .xls windows office2003
  • Templates/SaleS.xls
    .xls windows office2003
  • Templates/bargain.xls
    .xls windows office2003
  • Templates/chairtalk.xls
    .xls windows office2003
  • Templates/client.xls
    .xls windows office2003
  • Templates/communion.xls
    .xls windows office2003
  • Templates/compete.xls
    .xls windows office2003
  • Templates/deptask.xls
    .xls windows office2003
  • Templates/knowledge.xls
    .xls windows office2003
  • Templates/leave.xls
    .xls windows office2003
  • Templates/linkman.xls
    .xls windows office2003
  • Templates/meeting.xls
    .xls windows office2003
  • Templates/needmoney.xls
    .xls windows office2003
  • Templates/needrei.xls
    .xls windows office2003
  • Templates/notes.xls
    .xls windows office2003
  • Templates/outside.xls
    .xls windows office2003
  • Templates/product.xls
    .xls windows office2003
  • Templates/project.xls
    .xls windows office2003
  • Templates/servicelog.xls
    .xls windows office2003
  • Templates/tasl.xls
    .xls windows office2003
  • Templates/worklog.xls
    .xls windows office2003
  • Templates/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot