General

  • Target

    87db875d25c64fce2df08849e4999264_JaffaCakes118

  • Size

    282KB

  • MD5

    87db875d25c64fce2df08849e4999264

  • SHA1

    01426d8c8f10f77e5852b3b2a66ebca317da326b

  • SHA256

    c27b2c91781cc08cbc051a41f18fd7b2d5465a3636b92804ca1a635fa291ced9

  • SHA512

    1424fe3e03677e84bd417d8cf3880edca164950463070583969b53df6e76475bb0636d88c503c23e4c4c5a4cf9a0d87ee13ba69d116759b6ddffcef1b7330e8b

  • SSDEEP

    6144:5eNN5w1Dutlxg5dBiYIeGACOLRvJAonxON2lIVP5kJXcgD6fds:sNk1DalxgnBhIeGtwAonYNhVhkVc46Fs

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87db875d25c64fce2df08849e4999264_JaffaCakes118
    .rar
  • 商言.txt
  • 新云软件.url
    .url
  • 简单字符串替换工具.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections