General

  • Target

    43904841ec5608132a983bd467d74ebc_JaffaCakes118

  • Size

    363KB

  • MD5

    43904841ec5608132a983bd467d74ebc

  • SHA1

    1914f87568b433c03b25773c6efcbf6cd78de58b

  • SHA256

    a32be8dd1f62fb55756334f326488e6a4d7c555a0a64f558d03098813f08627b

  • SHA512

    a645dd0b5e147e1a6d68bbc3afe883cc1aabafd1042f79a0c72301da7bab14fd7f4bd5c2d2637acd1462882080ef7ffdfc5bedb3fe926c11c9f1b01dd4bd95a5

  • SSDEEP

    6144:1ni6Q8tR+Jp0BhAUCbYacP8unCl3j4mq4u0+o2hxN05Bu8cSKyoHZOyBw:1nih8tR+Jp0TAk18unqUd4FGhQ5Bu8cK

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43904841ec5608132a983bd467d74ebc_JaffaCakes118
    .rar
  • QQ文件自动接收精灵/QQFile.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ文件自动接收精灵/使用前须知.txt
  • QQ文件自动接收精灵/新云软件.url
    .url
  • QQ文件自动接收精灵/更新日志.txt