Overview

overview

7

Static

static

7

QQ花园�...��.url

windows7-x64

1

QQ花园�...��.url

windows10-2004-x64

1

QQ花园�...lv.exe

windows7-x64

7

QQ花园�...lv.exe

windows10-2004-x64

7

QQ花园�...��.url

windows7-x64

1

QQ花园�...��.url

windows10-2004-x64

1

QQ花园�...��.url

windows7-x64

1

QQ花园�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ed33a9da1fa6d355128c024efb644581_JaffaCakes118

  • Size

    741KB

  • MD5

    ed33a9da1fa6d355128c024efb644581

  • SHA1

    b445ac7c5bef09420cbf4885ec2b1d045c47fb92

  • SHA256

    a689a20abaa78b9cad3f97af20a81370a14b5995ef4c7f95d5f14e19f0d8c00d

  • SHA512

    e3bc880ea53ac142a23582345eb77db83e20e552fc1bf6c81a533a72cec6f096f1ee57c77c6049e5e192bad2ec9f8bc954e200011a71bd8b0ebfb969b433a635

  • SSDEEP

    12288:u5szSBpjN1Ehg8BAEaYRAwdIP3V+OtughxB/tlqbRzAI/06Wkeb8b/bfM38sNiv:p2BVvyjTmfPoOjle0KWv8b/jMpQv

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ed33a9da1fa6d355128c024efb644581_JaffaCakes118
    .rar
  • QQ花园伴侣 V2.17/26呀淘宝购物小帮手.url
  • QQ花园伴侣 V2.17/hybanlv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ花园伴侣 V2.17/hybanlv.up
  • QQ花园伴侣 V2.17/hyconfig.ini
  • QQ花园伴侣 V2.17/保留原配置及账号方法、帮助文档.txt
  • QQ花园伴侣 V2.17/免责声明.txt
  • QQ花园伴侣 V2.17/新云软件.url
    .url
  • QQ花园伴侣 V2.17/无法打开或报毒请看.txt
  • QQ花园伴侣 V2.17/更新日志.txt
  • QQ花园伴侣 V2.17/最新淘宝打折热卖.url