Overview

overview

7

Static

static

7

数据库�...er.exe

windows7-x64

3

数据库�...er.exe

windows10-2004-x64

3

数据库�...er.exe

windows7-x64

1

数据库�...er.exe

windows10-2004-x64

3

数据库�...32.exe

windows7-x64

3

数据库�...32.exe

windows10-2004-x64

3

数据库�...nt.dll

windows7-x64

1

数据库�...nt.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9bd2a0fa4f6c73344859b78b4845d1c_JaffaCakes118

  • Size

    1.7MB

  • MD5

    b9bd2a0fa4f6c73344859b78b4845d1c

  • SHA1

    7e2072870f55bfc5294153cf6a83fc59f2ff5f24

  • SHA256

    1ed1c8fb75a5e88eb0c5a2ad3c9d39b90103b66da53692af5f567cfc37ddee82

  • SHA512

    5e142cdd28d424b662d7733178a9b3b5eedacc6174ccdeb6fd54b1378a025d95b5a7c1c84c55fccf0cc0f1a8178f3f83a89d12768d4b6d05e810c7675a03abbe

  • SSDEEP

    49152:M5JGxYKRPugRlDkn6WFuOiDBnBSDyaR0B3:MuCs7vk5wOInv3B3

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b9bd2a0fa4f6c73344859b78b4845d1c_JaffaCakes118
    .rar
  • 数据库开发伴侣/DataConfig.ini
  • 数据库开发伴侣/SqlBrowser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 数据库开发伴侣/closeSqlBrowser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 数据库开发伴侣/odbcad32.exe
    .exe windows:5 windows x86 arch:x86

    ec75b619790fdff223fdeb0695a33be7


    Headers

    Imports

    Sections

  • 数据库开发伴侣/odbcint.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections