Overview

overview

7

Static

static

7

RogueClean...er.chm

windows7-x64

1

RogueClean...er.chm

windows10-2004-x64

1

RogueClean...er.exe

windows7-x64

3

RogueClean...er.exe

windows10-2004-x64

3

RogueClean...ix.exe

windows7-x64

1

RogueClean...ix.exe

windows10-2004-x64

3

RogueClean...an.dll

windows7-x64

3

RogueClean...an.dll

windows10-2004-x64

3

RogueClean...ne.dll

windows7-x64

1

RogueClean...ne.dll

windows10-2004-x64

1

RogueClean...ch.dll

windows7-x64

3

RogueClean...ch.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03e95ac3637a19299360d971705d747f_JaffaCakes118

  • Size

    1.3MB

  • MD5

    03e95ac3637a19299360d971705d747f

  • SHA1

    3135717450d1f8066641d9e4943f287ab875ffe1

  • SHA256

    1c9e48d6a066cc3c95906414ece5a0d9f2afec1363b684627175e203614a2516

  • SHA512

    01313db2d235541f4b0449e91aef82e074c31b8b42c3e88a9c94474843c76d468e4923affc8285c8f310026d19772aac2253b427873534f1bdf60be9fdbed951

  • SSDEEP

    24576:x3vut3AwSbDtmFLvulpzx+K0xLpS73OgygS:x3vuVNSbQLGx+K01U73O6S

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 03e95ac3637a19299360d971705d747f_JaffaCakes118
    .rar
  • RogueCleaner/roguecleaner/RogueCleaner.chm
    .chm
  • RogueCleaner/roguecleaner/RogueCleaner.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RogueCleaner/roguecleaner/WinSockFix.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RogueCleaner/roguecleaner/rsclean.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • RogueCleaner/roguecleaner/rsdefine.dll
  • RogueCleaner/roguecleaner/rsdubsearch.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections