Overview

overview

10

Static

static

10

手机轰炸机.exe

windows7-x64

10

手机轰炸机.exe

windows10-2004-x64

10

绿软基地.url

windows7-x64

1

绿软基地.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0714b95ae0c5691800303bf815e78aa6_JaffaCakes118

  • Size

    200KB

  • MD5

    0714b95ae0c5691800303bf815e78aa6

  • SHA1

    0809233069ae092d5330880f1bdda80371f21552

  • SHA256

    634e8bb52e9581b62c75f27ed80d92615fc6ef78fb697ac9b700490392d204d0

  • SHA512

    def457f529b7cc90b50d5bb9c6b87c624cbbfbf3fa2f38a17fc5c3c14e28abc1a05de95c28108f309c8d53bb4e44a8f788dece60e2f82c9520e81e572c81d543

  • SSDEEP

    6144:0C6cmgtxF0MZ9JDOYH+LWw2DpU2yVMbo7hrkpC1huZkqn:96X+Vq6+ihD3hEVoE1EZkqn

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0714b95ae0c5691800303bf815e78aa6_JaffaCakes118
    .rar
  • 手机轰炸机.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 绿软基地.url
    .url