Overview

overview

7

Static

static

7

IP_DNS_计...��.exe

windows7-x64

7

IP_DNS_计...��.exe

windows10-2004-x64

7

IP_DNS_计...��.url

windows7-x64

1

IP_DNS_计...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d99b7a198e4809943e2fd8d6fd9cc18_JaffaCakes118

  • Size

    367KB

  • MD5

    2d99b7a198e4809943e2fd8d6fd9cc18

  • SHA1

    9baba994fd846352c219477eb43a9df177017951

  • SHA256

    1091589f4a9cb7d0981c2591874130be11403fac33f8cb42b1e9cfa5730dbbe8

  • SHA512

    d8e7f755bf43af988408e3e9946140e636761f336a2d497a9009c9c9a5f3f3ee02c181797678e9e128b7cc079be1e5344aa16eb171d1fbd26258d7db27b87fa5

  • SSDEEP

    6144:Q2xeUY56wp68M2GNbBgxbE1xiK6chgHQogvlzUavojtWlx5sw:ZHYH6WyKFAYUgwoEJXlXsw

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d99b7a198e4809943e2fd8d6fd9cc18_JaffaCakes118
    .rar
  • IP_DNS_计算机名修改器（即时生效免重启）/IP_DNS_NAME.ini
  • IP_DNS_计算机名修改器（即时生效免重启）/IP_DNS_计算机名修改器（免重启）.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • IP_DNS_计算机名修改器（即时生效免重启）/飘荡软件.url
    .url