General

  • Target

    bf62ec493d54c56ca9635775b36ce8e9_JaffaCakes118

  • Size

    1.3MB

  • MD5

    bf62ec493d54c56ca9635775b36ce8e9

  • SHA1

    2c5f50cf3e1dfbb9a0145a59f8cf05173458af5c

  • SHA256

    feb5fa3b1e51edd0379d9b0bd9c0e6823c201c22928ed87152c954c57c2356c5

  • SHA512

    f9a8537b5ed665c080700d3751ee72a633746cc31b221fdf3d0628ef85385bbd6cad9e66c7f44c7c8d013df88ac6ed1f42a1df44a5769e161d57dacbf17435f4

  • SSDEEP

    24576:Hzk+hQepEQjiwox75/q4oNwXPxUvsjpi7Es4yAeV6knDAimgZPv2TQKGRF:jh51/eANkeEF+Es33jnMCZPvd

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf62ec493d54c56ca9635775b36ce8e9_JaffaCakes118
    .rar
  • 加密文件破解工具 4.0/FileDecrypt.JPG
    .jpg
  • 加密文件破解工具 4.0/FileDecrypt.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 加密文件破解工具 4.0/GetFile.JPG
    .jpg
  • 加密文件破解工具 4.0/GetFile.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 加密文件破解工具 4.0/Thumbs.db
  • 加密文件破解工具 4.0/影视播放或软件使用说明.txt
  • 加密文件破解工具 4.0/飘域家园.url
  • 加密文件破解工具 4.0/飘域家园,大型技术综合娱乐社区!.doc
    .doc windows office2003