General

  • Target

    6729eb093f44f171a68a0befebd4194d

  • Size

    387KB

  • MD5

    6729eb093f44f171a68a0befebd4194d

  • SHA1

    d14d6daab0330a9c7d1ca666700ab0ddde5f8368

  • SHA256

    88791f3ddeb064f4581fef25f3e20cbcee9096b3838e1a5a080b54e28135f6ac

  • SHA512

    a478865b19fb1ff9022443388714c287a05fd947683cf85bb05d00c00601b4330f1d12a3c24f55bd86d1b480ec6879cd9a184320f9c2afdb1a29445191c3f896

  • SSDEEP

    12288:R3IE1gvf+H/Zz9rat/mzSkwMFlSMn6pqrGMrhFROe4:R3yvEh9I/mzSkwSDn6UrGM3RD4

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6729eb093f44f171a68a0befebd4194d
    .rar
  • cygwin.reg
  • cygwin1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • myhttpd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt
  • 下载说明.htm
    .html .js polyglot