Overview

overview

7

Static

static

7

cvery.comd...ead.js

windows7-x64

3

cvery.comd...ead.js

windows10-2004-x64

3

cvery.comd...on.exe

windows7-x64

1

cvery.comd...on.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    29ab12d78a320d272576d6eb54d69aaa_JaffaCakes118

  • Size

    172KB

  • MD5

    29ab12d78a320d272576d6eb54d69aaa

  • SHA1

    6f15da64f655bce186ab5f1c4def0ae869a5fba7

  • SHA256

    62d4baba693a0a8b3c1f1fca54bbf28a29c00c636c2a28babc367bad2b5ed7c2

  • SHA512

    4f5e6ab864ffddf9937607a6e1121f07705d175b0b818bc56e6eaddbd3a2414081b221d3bc22e38c78e91a0211bc9196f2e615a36247776d9716c2121252b971

  • SSDEEP

    3072:reriTKzY0mfh47W7Su30w20QVORU/dWh2CMUyOTWuAbihBoGnqu4rds+PYdncPDR:IkioS785kw20DRU/kh9MATRAVGqDrdJr

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29ab12d78a320d272576d6eb54d69aaa_JaffaCakes118
    .rar
  • cvery.comdel717535362/HTTPGetThread.dcu
  • cvery.comdel717535362/HTTPGetThread.pas
    .js
  • cvery.comdel717535362/MainForm.dcu
  • cvery.comdel717535362/MainForm.ddp
  • cvery.comdel717535362/MainForm.dfm
  • cvery.comdel717535362/MainForm.pas
  • cvery.comdel717535362/MyHttpGet.dcu
  • cvery.comdel717535362/MyHttpGet.pas
  • cvery.comdel717535362/Provision.cfg
  • cvery.comdel717535362/Provision.dof
  • cvery.comdel717535362/Provision.dpr
  • cvery.comdel717535362/Provision.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comdel717535362/Provision.res
  • cvery.comdel717535362/下载说明.htm
    .html .js polyglot