Overview

overview

7

Static

static

7

留言监�...xz.htm

windows7-x64

3

留言监�...xz.htm

windows10-2004-x64

3

留言监�...xt.dll

windows7-x64

3

留言监�...xt.dll

windows10-2004-x64

3

留言监�...et.dll

windows7-x64

3

留言监�...et.dll

windows10-2004-x64

3

留言监�...ln.dll

windows7-x64

3

留言监�...ln.dll

windows10-2004-x64

3

留言监�...me.url

windows7-x64

1

留言监�...me.url

windows10-2004-x64

1

留言监�...ll.dll

windows7-x64

3

留言监�...ll.dll

windows10-2004-x64

3

留言监�...��.exe

windows7-x64

3

留言监�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    82a79f2544fc4064c5a602c1a0798a45_JaffaCakes118

  • Size

    723KB

  • MD5

    82a79f2544fc4064c5a602c1a0798a45

  • SHA1

    cbb932eab000523455bfa55b0699ebee288866d0

  • SHA256

    201d671f3d40f74c937954de337c32fbf9ae3bac83d5ca892a81a7d68271226b

  • SHA512

    b491dc2d7587f8655044a10f2667dddc37c483d4b52d862b2d432c31da548ddb528f6a2a2b3b687967c7cdf96b0999725139a9bebcae0d30116b582b994c12e3

  • SSDEEP

    12288:PE7ZBzuyo3fvFgNiZi6Rt990yz0TfbAFQPRuvVlFn7QefkWl4RFHwPQCzk2FuxAd:s77YvCl6R790yoT0yPwNvn71fk+WQJFL

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 82a79f2544fc4064c5a602c1a0798a45_JaffaCakes118
    .rar
  • 留言监视器/1.dat
  • 留言监视器/2.dat
  • 留言监视器/gmxz.htm
    .html
  • 留言监视器/gmzc.sz
  • 留言监视器/iext.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 留言监视器/internet.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 留言监视器/krnln.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 留言监视器/nanhome.url
    .url
  • 留言监视器/readme.txt
  • 留言监视器/save.dat
  • 留言监视器/shell.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 留言监视器/下载说明.htm
    .html .js polyglot
  • 留言监视器/留言监视器.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections