General

  • Target

    25b5a3160173e138c3665635c08314ec_JaffaCakes118

  • Size

    2.1MB

  • MD5

    25b5a3160173e138c3665635c08314ec

  • SHA1

    6800157c69e8cb35674cfce35bafd2656292fe91

  • SHA256

    021d78534fd7d2281ce01e37e60169d0d8c4ac4e50c6e6db3fff024fa44949af

  • SHA512

    b505d362ab359584717823db7178c2b5d87675797bde37f157df5a1b70eab125ef6f80ea8cdd605c749331aed24b2ba54c0bcc184112731f2317835f1774d619

  • SSDEEP

    49152:ZP/563EICLjdX81JX0I44d1TixTJWhs3e/BtIC1ib7Jdgzv:ZX56UIkX83V44nW1JWhJtICgbAzv

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 25b5a3160173e138c3665635c08314ec_JaffaCakes118
    .rar
  • IceSword122en/Cooperator.zip
    .zip
  • Cooperator/ChkFile/ChkFile.com
    .exe windows:4 windows x86 arch:x86

    db748aa7f3d44c9a13e5ce74a8f0a6d6


    Headers

    Imports

    Sections

  • Cooperator/ChkFile/sample.txt
  • Cooperator/ChkFile/˵.txt
  • Cooperator/Cooperator.h
  • Cooperator/IceSword110.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Cooperator/IsHelp.chm
    .chm
  • Cooperator/IsHelp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Cooperator/bcb6/IceSword110.lib
  • Cooperator/vc6/CopyFile.cpp
  • Cooperator/vc6/EnumProcess.cpp
  • Cooperator/vc6/FindFile.cpp
  • Cooperator/vc6/IceSword110.lib
  • Cooperator/vc6/RegOpt.cpp
  • IceSword122en/FileReg.chm
    .chm
  • IceSword122en/FileReg.icp
    .dll windows:4 windows x86 arch:x86

    c934c75c869dd5d2f074865e56e41e1b


    Headers

    Imports

    Exports

    Sections

  • IceSword122en/IceSword.chm
    .chm
  • IceSword122en/IceSword.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • IceSword122en/readme.txt
  • IceSword122en/安装说明.txt
  • IceSword122en/新云软件.url
    .url