General

  • Target

    b08bcec411567469afc2c9a0da3f99b9_JaffaCakes118

  • Size

    149KB

  • MD5

    b08bcec411567469afc2c9a0da3f99b9

  • SHA1

    add1c651d68a4976a6ca977679535d25879c7d11

  • SHA256

    23e54015da6c301d3b4b4bf03fd2566ee4359b102ae0241057067eb411e8b4d7

  • SHA512

    1a25a9a2d95b2cc4d743e85f90c88b19e3870f6177d5afeba56c4edbc2ad7de1c58480db8536327d46def2dba0992cf6bfd8d244bbf95e1c4f087f90f9960b15

  • SSDEEP

    3072:/i+8hbktux8Vc2zu8IFg0U8S4CIumRmpYh60TqhwPmAvo:/i+89x8Vc2aFFn041mO69Nmo

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b08bcec411567469afc2c9a0da3f99b9_JaffaCakes118
    .rar
  • vcool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • vcool/vcool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • vcool/说明.txt
  • 说明.txt