Overview

overview

7

Static

static

7

rsclean.dll

windows7-x64

3

rsclean.dll

windows10-2004-x64

3

rscleaner.exe

windows7-x64

3

rscleaner.exe

windows10-2004-x64

3

rsdefine.dll

windows7-x64

1

rsdefine.dll

windows10-2004-x64

1

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba5ba9d91c1f67cd57b33d15cf0ab1d9_JaffaCakes118

  • Size

    553KB

  • MD5

    ba5ba9d91c1f67cd57b33d15cf0ab1d9

  • SHA1

    1e6c0e314b8e80a7fa26133a29dd9ccfa0ebb4dc

  • SHA256

    d67843090629ef983d3af41d00292524f8f9b5345caa224a1b522338558aa79a

  • SHA512

    ced5429a4f68175bedd09eea9765198d0bdf6478f9adced7c64c1db906ce44559beb16dba244d168b056fb61340c7e570bccc43473bfb32d1c9a86b82c270b78

  • SSDEEP

    12288:NCxGp3mAW0kRNTLsGFsHnYhl87CDuxcKy3MY56fpYPNkYK:NC2jRkTLNphlVDgM3M1fpyxK

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ba5ba9d91c1f67cd57b33d15cf0ab1d9_JaffaCakes118
    .rar
  • rsclean.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rscleaner.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • rsdefine.dll
  • 安装说明.url
    .url