General

  • Target

    5f92dda7fd9211580f458af62ae6e79d_JaffaCakes118

  • Size

    257KB

  • MD5

    5f92dda7fd9211580f458af62ae6e79d

  • SHA1

    57c7caf4c298574e4f37ed2dbe7e1da5b3f0517a

  • SHA256

    934f6918882ba26b90818f0eeccf389d203ecce5bf6b3f77e21bb362cec02ed3

  • SHA512

    83c343e74135d8d2c3daeaaae8317be567577dfa7d33df01c74d999e9943e97ebc27ce47d38abd8bfa4fa6bdc8b9be9ea80d33f496c7fc8e4e401e93a01b514a

  • SSDEEP

    6144:SDikLm5RfV6p6Y+ax2KpbZ8vGpsF/dQB/PlN7:SWOm5ep6CxZ+Rir7

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f92dda7fd9211580f458af62ae6e79d_JaffaCakes118
    .rar
  • file_recovery.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url