Overview

overview

7

Static

static

7

DiskID32.dll

windows7-x64

6

DiskID32.dll

windows10-2004-x64

6

DiskSerial.dll

windows7-x64

1

DiskSerial.dll

windows10-2004-x64

3

kiboFuns.dll

windows7-x64

1

kiboFuns.dll

windows10-2004-x64

3

好域名�....1.exe

windows7-x64

6

好域名�....1.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    f66c8be1d8b6aed759b11c3bf3b5aa33_JaffaCakes118

  • Size

    317KB

  • MD5

    f66c8be1d8b6aed759b11c3bf3b5aa33

  • SHA1

    5c80aac02212d1f8775b088714807531d50e9f11

  • SHA256

    6ca58b7085f4dbf1bfe478d522f5a984c2703b2350100b106c61f2a1af1805f1

  • SHA512

    aac7d0ad9fa6c702e6a596797acca8f77b8cbb911a319261a0a0c1c53e540df5257fbe522da012d7519cb5cd992592f976df40b5294734aa2939b894bdab0c94

  • SSDEEP

    6144:TbC9Np8la2hbv+Hhj2jjlCaQTD5Kq3ANI3dWvUM762vI3ePGh3ksxTJrou:ajp0a2hbEjYCaQTD5wNI3dWJ76YI3jh9

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • f66c8be1d8b6aed759b11c3bf3b5aa33_JaffaCakes118
    .rar
  • DiskID32.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • DiskSerial.dll
    .dll windows:4 windows x86 arch:x86

    28dde0b4e2c1821b8b7f4e0406fca3d1


    Headers

    Imports

    Exports

    Sections

  • kiboFuns.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 好域名注册王1.1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 帮助.txt