Overview

overview

7

Static

static

7

baobaoqumi...��.exe

windows7-x64

6

baobaoqumi...��.exe

windows10-2004-x64

6

baobaoqumi...cn.url

windows7-x64

1

baobaoqumi...cn.url

windows10-2004-x64

1

baobaoqumi...��.url

windows7-x64

1

baobaoqumi...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b7a74b86d348a4fe8635b71c92072b1_JaffaCakes118

  • Size

    1.5MB

  • MD5

    2b7a74b86d348a4fe8635b71c92072b1

  • SHA1

    13ec40f301bbe92287856c5b35e4a6929e0541cf

  • SHA256

    78204afeae52dfe345a00919d8f2c7947758606c84dd4ec4bb111c965034a577

  • SHA512

    532890a221202f92fab8d4eb413147078badfd37e57d2c6aec7667a60a97fb3e83641e28e84c662f33277306c617504c197672045af13e481b702d5f9fba9bb4

  • SSDEEP

    24576:/ig0c20lnkZq9vPeLgwsDYK3L7I6LuBL79wB169alz9ae6CmFEzAzKJEg3m2u/Wm:/itFqlPOkEK39k9Equ3mFHkm282ZF/o

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b7a74b86d348a4fe8635b71c92072b1_JaffaCakes118
    .rar
  • baobaoquming/宝宝取名软件.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • baobaoquming/河源下载站-cngr.cn.url
    .url
  • baobaoquming/淘宝热卖.url
    .url