Overview

overview

7

Static

static

7

网络即�...��.ppt

windows7-x64

3

网络即�...��.ppt

windows10-2004-x64

1

网络即�...��.exe

windows7-x64

3

网络即�...��.exe

windows10-2004-x64

3

网络即�...er.exe

windows7-x64

3

网络即�...er.exe

windows10-2004-x64

3

网络即�...er.exe

windows7-x64

3

网络即�...er.exe

windows10-2004-x64

3

网络即�...im.chm

windows7-x64

1

网络即�...im.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf6ebf72a8c7b4fda0fd81fe8b4c7389_JaffaCakes118

  • Size

    5.4MB

  • MD5

    bf6ebf72a8c7b4fda0fd81fe8b4c7389

  • SHA1

    010edee25c4f3d31b1c0f50b5db1e36f14a4ab28

  • SHA256

    25a9e06c35f62d2c5650515612a257c9ec6db2fa8f17a598df3c374e31dd5d44

  • SHA512

    344dcf4202f293baa38012a97264b1509bc160f21dcf446e674fe810781ec72e8d4e220402ec86651182da7a8d4b600db6ebcb74ddd7be992ffbd4dafe931765

  • SSDEEP

    98304:K3Wh56fKpEFVbgxvDw/YjtWZOZXfuXYZEyZ+xW4y/arN8ZzWtSzyT05UA8t:KY56fKpWaxmAtsOZX2IZLGWh/aOBZUAu

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • bf6ebf72a8c7b4fda0fd81fe8b4c7389_JaffaCakes118
    .rar
  • 下载说明.htm
    .html .js polyglot
  • 网络即时办公2.89/readme.txt
  • 网络即时办公2.89/下载说明.htm
    .html .js polyglot
  • 网络即时办公2.89/网络即时办公介绍.ppt
  • 网络即时办公2.89/网络即时办公客户端安装程序.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 网络即时办公2.89/网络即时办公服务端/DBServer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 网络即时办公2.89/网络即时办公服务端/EIM.ini
  • 网络即时办公2.89/网络即时办公服务端/IMServer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 网络即时办公2.89/网络即时办公服务端/eim.chm
    .chm
  • 网络即时办公2.89/网络即时办公服务端/服务端启动说明.txt