Overview

overview

7

Static

static

7

kelongqi_6...ng.exe

windows7-x64

3

kelongqi_6...ng.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ab89f522420f9273dc4b0669f6c414e_JaffaCakes118

  • Size

    402KB

  • MD5

    0ab89f522420f9273dc4b0669f6c414e

  • SHA1

    93f38f82f1836b78cf16a60543d7d9d43f93cd4c

  • SHA256

    f4a374c5e3eac36d4e8b5d5b35f8e7f07144452bc3db84c7adb405820f556772

  • SHA512

    04aab349b83b5b8046cad860180eeacf55f1fbf12d3aea370d999d1edd61e51e84d124b1e9ef9372ef193cd8770b15f52647f9c115cda025bc020666bc2a9cae

  • SSDEEP

    12288:nhHs9Exvud/jgobSneBY57isf8ubruxu2Wp:nhHs9y+/jgOSee575nn8u2Wp

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ab89f522420f9273dc4b0669f6c414e_JaffaCakes118
    .rar
  • kelongqi_6.5_lhdown/Qzonekelong/Qzonekelong.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • kelongqi_6.5_lhdown/Qzonekelong/下载站下载说明.htm
    .html .js polyglot
  • kelongqi_6.5_lhdown/Qzonekelong/使用方法.txt