General

  • Target

    1b4384cbcdd69c3851c65f6fb263e667_JaffaCakes118

  • Size

    1.6MB

  • MD5

    1b4384cbcdd69c3851c65f6fb263e667

  • SHA1

    21c726ad462c7207ab5d793444f903b3f8af907a

  • SHA256

    cb617c780faf39ca286b3952f6a8b3d369c1a3b9b4259a6711e03fd350fa952f

  • SHA512

    2d59ee959072cd9d6e50eea2c20f11c903f354703c76487f0eb3cd133184488e9c3168d67da07ea374ef7217356b6a202dea3c0db74f2c2927201273814547ad

  • SSDEEP

    24576:R661lKrGZSOfFJ567JoUiQt+9Ye3VVAKA5enAiqQiY/Xiv9j4krkGicCOYI:Rh1+NO9T67GUZtEY8VBATm/XS9BicSI

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b4384cbcdd69c3851c65f6fb263e667_JaffaCakes118
    .rar
  • IPLook.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQWry.Dat
  • readme.txt
  • 下载说明.htm
    .html .js polyglot