Overview

overview

7

Static

static

7

StarWH.exe

windows7-x64

3

StarWH.exe

windows10-2004-x64

3

data/Metro.htm

windows7-x64

1

data/Metro.htm

windows10-2004-x64

1

data/Phone.htm

windows7-x64

1

data/Phone.htm

windows10-2004-x64

1

data/Timeex.htm

windows7-x64

1

data/Timeex.htm

windows10-2004-x64

1

data/Worlda.htm

windows7-x64

1

data/Worlda.htm

windows10-2004-x64

1

data/新云软件.url

windows7-x64

1

data/新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6c57d004cfbad7781912a6e2eab9555

  • Size

    2.9MB

  • MD5

    d6c57d004cfbad7781912a6e2eab9555

  • SHA1

    924c43209270f7caba7a4d29bfd2650a894ce4fe

  • SHA256

    f3c7652e2a807212dee06c10ade51567af16eeb72c0f12152e6dd5cf0e1b2c71

  • SHA512

    43d45c708dd38ca5e38001a98ddbc1bcbc14833724ded39c60c4c55dac085c8d1bc33690cb257ab2c375d0d60018bcaa74de9d689c50b06893bab6ecb8b89890

  • SSDEEP

    49152:RbLqc/Uwpsd+OB9QLOVrQqY6ti5DPyOtu6GKK2+jFMsSz6hnXtZ5MlLuoW5YFAcP:x13psP9QLOV+ZyOtu6kfOsdXn5Mpa5Yb

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6c57d004cfbad7781912a6e2eab9555
    .rar
  • StarWH.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • data/Metro.htm
    .html
  • data/Phone.htm
    .html
  • data/Timeex.htm
    .html
  • data/Worlda.htm
    .html
  • data/calendar.mht
    .eml .js polyglot
  • data/starCRM.mdb
  • data/新云软件.url
    .url
  • 说明.txt