Overview

overview

7

Static

static

7

StarCRM.exe

windows7-x64

3

StarCRM.exe

windows10-2004-x64

3

Templates/ccar.xls

windows7-x64

3

Templates/ccar.xls

windows10-2004-x64

1

Templates/client.xls

windows7-x64

3

Templates/client.xls

windows10-2004-x64

1

Templates/...ee.xls

windows7-x64

3

Templates/...ee.xls

windows10-2004-x64

1

data/StarEnc.exe

windows7-x64

3

data/StarEnc.exe

windows10-2004-x64

3

使用帮助.chm

windows7-x64

1

使用帮助.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1dc39c587b5b6cbdcb6848a8aa1f5a1_JaffaCakes118

  • Size

    6.4MB

  • MD5

    b1dc39c587b5b6cbdcb6848a8aa1f5a1

  • SHA1

    79de3617cb09d539b81d7491d2b4c50f5b26916b

  • SHA256

    75056c04c992c4d06b08e4c436dd76ab13f21b1683e6ee0c8a06c305d42350f3

  • SHA512

    9d6920ffc75b68a50eaa39c42eb7d27dab1454493b9294651a6fa26bacf288b2c7b73daf3952d3e19a4c5a49baec2cbce75a1ee9447a6f7cb1a1d5e18fd57fac

  • SSDEEP

    98304:NBNEpjgMixYhdIcVQKgHmlKcsT5oSTQnz1FAeA5bmS5bmBclfllZyVY8XuN3:nN8gMixYAcVQKQmlKbYk5KS51bPyWOu5

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b1dc39c587b5b6cbdcb6848a8aa1f5a1_JaffaCakes118
    .rar
  • Readme.txt
  • StarCRM.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • StarCRMdb.mdb
  • Templates/ccar.xls
    .xls windows office2003
  • Templates/client.xls
    .xls windows office2003
  • Templates/employee.xls
    .xls windows office2003
  • Templates/下载说明.htm
    .html .js polyglot
  • data/StarEnc.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • data/calendar.mht
    .eml
  • email-html-1.txt
    .html .js polyglot
  • data/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot
  • 使用帮助.chm
    .chm