General

  • Target

    678d09a161de8d42f8639dfed4809d95_JaffaCakes118

  • Size

    245KB

  • MD5

    678d09a161de8d42f8639dfed4809d95

  • SHA1

    a80a5c956853fceb905f305c3255d22e944fcc72

  • SHA256

    d55c7217df4efaa2db72c43892d4e448b249ae89ab38f68c7a418fb2e259fc97

  • SHA512

    80df6be8d8453d8d96afe9498fe3b7c3146fb3de6043da9524c4b7847d7a45024e2893d66e98eaf9e2a465c55135e3f7ff2729c5f25d7a41d28a2fe4287e3fe3

  • SSDEEP

    6144:enp4qV8wKjEGk1LcEibR/qWVpuX7mvXT7:eTKwK4ibRTpCmPT7

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 678d09a161de8d42f8639dfed4809d95_JaffaCakes118
    .zip
  • sivinsprosaver.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections