General

  • Target

    4280c687b499ab9199a0922e9ac65c40

  • Size

    447KB

  • MD5

    4280c687b499ab9199a0922e9ac65c40

  • SHA1

    6170903329b2c8793e9351716e5b44951e2d221f

  • SHA256

    19e4809382b97b1d9bcfd02c5983dd71206e7a85f4077f3a3ab07fa1892117ea

  • SHA512

    0122eae505be79f2ffc7248f099366e1752225e2f98def49c9bf79dd18eea2d1d2956bbddd05f416048f9cd82349853c7ae2376bc8de288448264baeebdef81b

  • SSDEEP

    6144:nK7CEPsXjFh/6TYqCln+XhVSgQstxYk31V2YA5bXuSKzeSeauwzDaZUVJhHL:czUnsXC+X3Sby1eeteSbzDaZKzL

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4280c687b499ab9199a0922e9ac65c40
    .rar
  • 极品公交时刻表/JPSK_Bus.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 极品公交时刻表/JpBus.ini
  • 极品公交时刻表/JpCitys.ini
  • 极品公交时刻表/JpbDll/beijing.dll
  • 极品公交时刻表/新云软件.url
    .url