General

  • Target

    deba9a88bf853072d5fbe2227a058692_JaffaCakes118

  • Size

    360KB

  • MD5

    deba9a88bf853072d5fbe2227a058692

  • SHA1

    5557074c4fa826c06c4b79afa53ff4dd6922b720

  • SHA256

    6d3d1e75a5864225e9adaf99e3d02d9ee2325edd2c7ede2e18ad7ca802121fa0

  • SHA512

    85f1a0094349e8e3f2ebd0a7a79288912d45b37facf0cfc83c106ef92cf619a64564acae035ee0fe35d4632e3475a99a303564ae03de175a8e0895f6a3cd0777

  • SSDEEP

    6144:wM9V+DurCy8YZGi3MqA3GZ8Zf5yp1S2TIb3yLSaM0/Ba8DCFrgN400L10jOotfkP:wnurCCZMqA3e6f4S2TQqQHM0BKlk4E3

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deba9a88bf853072d5fbe2227a058692_JaffaCakes118
    .rar
  • icohq/ico图标获取器V2.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • icohq/商言.txt
  • icohq/新云软件.url
    .url