General

  • Target

    f1bdce38eab11abec85cadab77e9639a_JaffaCakes118

  • Size

    544KB

  • MD5

    f1bdce38eab11abec85cadab77e9639a

  • SHA1

    e12fa30aeb3062c53640286ab451065d2c33e86d

  • SHA256

    34732d8252232b9d68c4b9f50ba17f65face4846380a17d4720170c585b94e6b

  • SHA512

    65969dc9e1427f8d2b05101e55aff5b86d72dab56ab87b9efd79dd23623064b4e59c6bc0706e86a3f59a61ec88fe247ac2d5d0582b517cd82c5d50e120ef2ae8

  • SSDEEP

    12288:Ew8YiDtdBOIcDyyLki4vS5X5cRb2RNDA4TIs9cInf+GmSjQ0+am2:EwziTGlki47Rb2bM48sKl92

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1bdce38eab11abec85cadab77e9639a_JaffaCakes118
    .rar
  • WordBrowser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url