Overview

overview

7

Static

static

7

For 2003�...03.exe

windows7-x64

3

For 2003�...03.exe

windows10-2004-x64

3

For 2004SQ...QL.exe

windows7-x64

3

For 2004SQ...QL.exe

windows10-2004-x64

3

For 2004�...04.exe

windows7-x64

3

For 2004�...04.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    32065404d2fd8a47a5106df674fe1ee8_JaffaCakes118

  • Size

    706KB

  • MD5

    32065404d2fd8a47a5106df674fe1ee8

  • SHA1

    1fbc0115ee71ad817b2bf30c385d9deb5b7f2a17

  • SHA256

    6ac94fe035c02d48bf4e0af01234111ed07926a2559c001da49d01edb07d6299

  • SHA512

    b54b40c90d40347cb842dd5a4eed9e7074f29a4474c01748aab856d43e6dc25ed34a97e951a704e9fffb5513d831678f3468f637f2bda5e16157f12e30a5ba0e

  • SSDEEP

    12288:Qj7W3jBIcFQgqP8QJnGldVmakpt3chTnRWE/Esfc30CWJ1J:QPeBYgqPfGldVApebk2EsDCWJ1J

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 32065404d2fd8a47a5106df674fe1ee8_JaffaCakes118
    .rar
  • For 2003版/wx2003.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • For 2003版/wx2003.ini
  • For 2003版/下载说明.htm
    .html .js polyglot
  • For 2004SQL 版/2004SQL.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • For 2004SQL 版/2004SQL.ini
  • For 2004SQL 版/下载说明.htm
    .html .js polyglot
  • For 2004版/WX2004.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • For 2004版/WX2004.ini
  • For 2004版/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot
  • 说明.txt