General

  • Target

    7501e191b3828fd645f3fd1d0e776cf5_JaffaCakes118

  • Size

    19KB

  • MD5

    7501e191b3828fd645f3fd1d0e776cf5

  • SHA1

    3d8b8aeec8ef845816f7c24bef819548620e570b

  • SHA256

    bb05920db3c869fff5a666502fc05d5fec701a36a29afa6ac40ee5910168754f

  • SHA512

    3318ec4b7875a79229a1dfcdbe5699d860fb45bace94b5bbd9a1f6e4b761679e8730efe0961359358de2a9cfe55c382f1327689f2c96196a5047a98378723fac

  • SSDEEP

    384:nkNhHTGsXiMbUTrRzPWEPOOcmNe13qjel5qOVi8FxOvzzlc3Xe:nmHqsXiMbWzj0mNe13qYdVh+vC3Xe

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 7501e191b3828fd645f3fd1d0e776cf5_JaffaCakes118
    .rar
  • 飘荡软件.url
    .url
  • 鼠标锁.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 鼠标锁定.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections