Overview

overview

7

Static

static

7

FreeForm.exe

windows7-x64

3

FreeForm.exe

windows10-2004-x64

3

Templates/ccar.xls

windows7-x64

1

Templates/ccar.xls

windows10-2004-x64

1

Templates/client.xls

windows7-x64

1

Templates/client.xls

windows10-2004-x64

1

Templates/...ee.xls

windows7-x64

1

Templates/...ee.xls

windows10-2004-x64

1

Templates/...��.url

windows7-x64

1

Templates/...��.url

windows10-2004-x64

1

data/Metro.htm

windows7-x64

1

data/Metro.htm

windows10-2004-x64

1

data/Phone.htm

windows7-x64

1

data/Phone.htm

windows10-2004-x64

1

data/Timeex.htm

windows7-x64

1

data/Timeex.htm

windows10-2004-x64

1

data/Worlda.htm

windows7-x64

1

data/Worlda.htm

windows10-2004-x64

1

data/非�...��.url

windows7-x64

1

data/非�...��.url

windows10-2004-x64

1

使用帮助.chm

windows7-x64

1

使用帮助.chm

windows10-2004-x64

1

非常世�...��.url

windows7-x64

1

非常世�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    508ce134e7a144c71853ba6aa2146b87

  • Size

    6.1MB

  • MD5

    508ce134e7a144c71853ba6aa2146b87

  • SHA1

    139439b2f14f4d0a20bfb0ab3dfa4c533549b2d0

  • SHA256

    f96e08b744ff5b5218abde4df5676370a6f3f156cd43a725b619dcd850d67018

  • SHA512

    2726754dd9603d40cadc91707aa10b4df49a0a63527f8c768491783a39994e5ce588e4b64311e0bd21f0a7095d4856023f22cd67540de35772c4cffb34287c21

  • SSDEEP

    196608:jyk0LAGpwr9WUE5bzR+gME2836QOc4jKADtD1RUC:EAGpc9Wt5bogBVTGKPC

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 508ce134e7a144c71853ba6aa2146b87
    .rar
  • FreeForm.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Templates/ccar.xls
    .xls windows office2003
  • Templates/client.xls
    .xls windows office2003
  • Templates/employee.xls
    .xls windows office2003
  • Templates/下载说明.htm
    .html .js polyglot
  • Templates/非常世纪资源网.url
    .url
  • data/Metro.htm
    .html
  • data/Phone.htm
    .html
  • data/StarCRMdb.mdb
  • data/Timeex.htm
    .html
  • data/Worlda.htm
    .html
  • data/calendar.mht
    .eml .js polyglot
  • data/下载说明.htm
    .html .js polyglot
  • data/非常世纪资源网.url
    .url
  • 下载说明.htm
    .html .js polyglot
  • 使用帮助.chm
    .chm
  • 说明.txt
  • 非常世纪资源网.url
    .url