Overview

overview

7

Static

static

7

IP流量�...te.exe

windows7-x64

1

IP流量�...te.exe

windows10-2004-x64

1

IP流量�...ok.dll

windows7-x64

1

IP流量�...ok.dll

windows10-2004-x64

1

IP流量�...in.exe

windows7-x64

6

IP流量�...in.exe

windows10-2004-x64

6

IP流量�...ck.exe

windows7-x64

1

IP流量�...ck.exe

windows10-2004-x64

1

使用说明.html

windows7-x64

1

使用说明.html

windows10-2004-x64

1

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

极速软�...��.url

windows7-x64

1

极速软�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4638cb71e7b76b658c02b9a1a4b0907_JaffaCakes118

  • Size

    888KB

  • MD5

    b4638cb71e7b76b658c02b9a1a4b0907

  • SHA1

    479af14b6dc5ae4c375a5c1a54edf54ca583c910

  • SHA256

    8af4ee9ceac11b2d429feb84b86c9bab52a32b44c0e3a5bc0ec8e9c37a8c2b16

  • SHA512

    896636c5e6b7fddc73b2449dafb2f18a357849736e8332acfa0cf85124eecd9e46629526080de1928b5ec22d0293c498b3325bdc678042ec2f3e7b49fd3f589c

  • SSDEEP

    24576:C7E3WYfkK20e8s5e0hMwiqRMAuVMnOIkimqG9uYMbSY:CODc0AfMTqRMA9nOIkimqQGbL

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b4638cb71e7b76b658c02b9a1a4b0907_JaffaCakes118
    .rar
  • IP流量工厂_1_0_绿色版_Jisuxz.com/AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    004b9526a3eadf34a6acc02e8d901032


    Headers

    Imports

    Sections

  • IP流量工厂_1_0_绿色版_Jisuxz.com/cp_hook.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • IP流量工厂_1_0_绿色版_Jisuxz.com/main.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • IP流量工厂_1_0_绿色版_Jisuxz.com/system.ini
  • IP流量工厂_1_0_绿色版_Jisuxz.com/w_click.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 使用说明.html
  • 使用说明.url
  • 极速软件下载.url