General

  • Target

    66abb69fec4ad0d3c9fff8fb87031036_JaffaCakes118

  • Size

    770KB

  • MD5

    66abb69fec4ad0d3c9fff8fb87031036

  • SHA1

    8aed03328c99427e970cc66ea461bd437097797f

  • SHA256

    1e5b98b1cf8aca01212aaa473e1f126c7631464626b51c160bc4af8c7d9398e7

  • SHA512

    302e66c91dc3b7c617790883e4c7223ecdc6d6f89e15de0e87c2f757907929ed18fe83e3bfa3e0ec6b39b2da767aa262f96e7b400b5dd798039a5eb483239de1

  • SSDEEP

    12288:fRQ1kjzMV7dmJHYlD/bza3YeENbwH13b+7RxVrsVp0zxCPMYm1Zyjwp2+mL:YKzCDXFecsHNq7Rxsp0oMR2wpbmL

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66abb69fec4ad0d3c9fff8fb87031036_JaffaCakes118
    .rar
  • MultiReplace/一般替换规则.rrr
  • MultiReplace/全角转半角.nrr
  • MultiReplace/新云软件.url
    .url
  • MultiReplace/替换空行(unix).rrr
  • MultiReplace/替换空行(windows).rrr
  • MultiReplace/特征替换规则.crr
  • UltraReplace.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UltraReplace.xml
    .xml