Overview

overview

7

Static

static

7

汪来电�...12.dll

windows7-x64

1

汪来电�...12.dll

windows10-2004-x64

1

汪来电�...ls.dll

windows7-x64

1

汪来电�...ls.dll

windows10-2004-x64

1

汪来电�...EW.dll

windows7-x64

1

汪来电�...EW.dll

windows10-2004-x64

1

汪来电�...K1.dll

windows7-x64

1

汪来电�...K1.dll

windows10-2004-x64

1

汪来电�...MP.dll

windows7-x64

1

汪来电�...MP.dll

windows10-2004-x64

1

汪来电�...32.dll

windows7-x64

1

汪来电�...32.dll

windows10-2004-x64

1

汪来电�...EW.dll

windows7-x64

1

汪来电�...EW.dll

windows10-2004-x64

1

汪来电�...VC.dll

windows7-x64

1

汪来电�...VC.dll

windows10-2004-x64

1

汪来电�...EW.dll

windows7-x64

1

汪来电�...EW.dll

windows10-2004-x64

1

汪来电�...ls.dll

windows7-x64

1

汪来电�...ls.dll

windows10-2004-x64

1

汪来电�...pi.dll

windows7-x64

1

汪来电�...pi.dll

windows10-2004-x64

3

汪来电�...��.exe

windows7-x64

3

汪来电�...��.exe

windows10-2004-x64

3

汪来电�...��.exe

windows7-x64

3

汪来电�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    59982fbcc3d88c52bb81f7ba4d690682_JaffaCakes118

  • Size

    1.4MB

  • MD5

    59982fbcc3d88c52bb81f7ba4d690682

  • SHA1

    48f49b551c70bfa78c64b5bae101f68f60a1e3b9

  • SHA256

    356514e10cce866e2dbb3515f222562ae26ba4d4f07c36f5616bcdd6ddba7f38

  • SHA512

    b8b650b25b32bd003abd2cb1e105966964cc41bf35bc746dc909a228c177e64581cabce1a19b27f04fce4b19de0f6fe9f34f27d44d202be398b8979abdd91c20

  • SSDEEP

    24576:AXDCFsEwM28C8Cun8zzPMWBV4/zpsKvqJ0X05Pc:AXDCFnCsCun83BrIzpS/Fc

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 59982fbcc3d88c52bb81f7ba4d690682_JaffaCakes118
    .rar
  • 汪来电脑用时记录电表仪/Budapi312.u32
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来电脑用时记录电表仪/WinCtrls.u32
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/BMPVIEW.X32
    .dll windows:4 windows x86 arch:x86

    2fdd25610daa7981c6253ae5474bf538


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/DMPACK1.X32
    .dll windows:4 windows x86 arch:x86

    80626e7c8f961407b2d794b2fbad65b5


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/JPEGIMP.X32
    .dll windows:4 windows x86 arch:x86

    3416d78532757e3047fe9b8c19675b74


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/MIX32.X32
    .dll windows:1 windows x86 arch:x86

    516d96cfdc44d9e18781bf957dcfee80


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/MIXVIEW.X32
    .dll windows:4 windows x86 arch:x86

    8053b170264ea63c73bea4ae025ac8a2


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/VIEWSVC.X32
    .dll windows:4 windows x86 arch:x86

    314d2eacc5d3a48f48d46ce982a61ce0


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/XTRAS/WMFVIEW.X32
    .dll windows:4 windows x86 arch:x86

    feea7adb85e6d7e6ac76fe0ae17c4ab7


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/altools.u32
    .dll windows:4 windows x86 arch:x86

    759a803fc5765c19365fdd8f688cd6d1


    Headers

    Imports

    Exports

    Sections

  • 汪来电脑用时记录电表仪/binapi.u32
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来电脑用时记录电表仪/下载说明.htm
    .html .js polyglot
  • 汪来电脑用时记录电表仪/汪来电脑用时记录电表仪.exe
    .exe windows:4 windows x86 arch:x86

    57bc51db4053803328e9623bbe8ea4c9


    Headers

    Imports

    Sections

  • 汪来电脑用时记录电表仪/汪来电脑用时记录电表仪简介.txt
  • 汪来电脑用时记录电表仪/附件.dll
    .exe windows:4 windows x86 arch:x86

    57bc51db4053803328e9623bbe8ea4c9


    Headers

    Imports

    Sections