General

  • Target

    27f68ac1629b79892e9cab1a154a912f_JaffaCakes118

  • Size

    11KB

  • MD5

    27f68ac1629b79892e9cab1a154a912f

  • SHA1

    dfb884a47a9860c857815bb61307bcd835ca8d0d

  • SHA256

    0c0afa148f692690d123ea34950ff8475c3be79d71a75d6e8bcc8f753285f373

  • SHA512

    80577a4f96c680a5dd19e7ca6e84cb5818aa66501906a7800c541a69a2e8730a97b01b4a981b20d830a7d93b1c9651323b536b4c9e1ea5989195626764f3176b

  • SSDEEP

    192:WKDfee0CAgFGWAPCx8eUD7fqbCkQkjjhu3ShmGtnS2Hb2/tSCM/swslAAYP4ZAQc:WDetHp5IPqbUkjFu3qtnm/tdVybP4Zpc

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27f68ac1629b79892e9cab1a154a912f_JaffaCakes118
    .rar
  • cadqujiaoyuban/cad去教育版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cadqujiaoyuban/飘荡软件.url
    .url