263cb8bc40b625c631b97036ff42c206_JaffaCakes118

resource
unpack002/lhftpbak/sjbf.exe

SHA256 932bb249fdaf5f667b5961311848d88bf84c31243d37b468e464db0fa72581a8
MD5 263cb8bc40b625c631b97036ff42c206
SHA1 e0bfcb7cabe29f8ca8027837cbde9e356bc3854b
SHA512 9fbffc6c4c66336a8ede46a6197d7735a290d79409e1124573cded8eaac66cb32357077447e08777bd19d09d20714afba7c01630290b1fe7a3556e725e190719
SSDEEP 24576:j7Ctms1zJU17bQV1j4INWE7lZ6ZmYxYLifdoDXG0lsvmWhs9OQp:j729zJGvgR4I57lZ6dGQiNW7s9OI
MD5 SHA1 SHA512 SSDEEP

FTP数据备份软件_PChome下载介绍.txt

SHA256 58577ce43c5ffeae25c146c2ce6d9cb18d9a31638dcfbbb3ffc5eb7404e97718
MD5 b5705ee5899b4cfe8570a4e1f836f585
SHA1 86bf36a5f911892d384a7335fe4ae866dfd480fc
SHA512 d836d224acc67a8e0be4e8d588ec02589d6957a78fffb423ab5b77bb28c5359114baccce51c713e3e4c0aadfc2b2b7f34a472d90d7bcd6385adf24232c93c1d1
MD5 SHA1 SHA512

PCHome_download.html

SHA256 c9389b0370d5af112903f6fe648297068aff32c64bff90d3e0098a753329b08d
MD5 bcec0e2637c60c61e564c10c13f70077
SHA1 1ca7c615bbd41eda253b1fb2dd57191f17be116c
SHA512 7a21fd610cd91c15cfac3d8a5ea7ac637ceefc0339226b98044d6eddcd97f2301394a4079d2bf35de413b0dd117c2ba87826bc309506270eab3d7ed451a46625
MD5 SHA1 SHA512

lhftpbak.rar

SHA256 70fd7560a94a03ce78fcbb20548c6ebc3a30608e16b1f254323f3f53cc9bb3fd
MD5 d29282f4977aac0f90cf94bf12749d6c
SHA1 a6ea01057b963f03adeef8034f86be79c04950c6
SHA512 5265b0fe524e0ecac4623ce6df6824b6b4ea37426068b404504946ce03256e6161351597221203efa52be42bd84840edf161c3bcdc331ce04707d05502b2acb6
SSDEEP 24576:47Ctms1zJU17bQV1j4INWE7lZ6ZmYxYLifdoDXG0lsvmWhs9OQs:4729zJGvgR4I57lZ6dGQiNW7s9Ob
MD5 SHA1 SHA512 SSDEEP

lhftpbak/sjbf.exe

SHA256 c49123abb1671f28168a2f9f2fce3926980a767b7aa407cd6b8718339a7e8826
MD5 d1896c3c7b440fc3a7b350a283655046
SHA1 8ab17e6a6a56325ecb2a39b7c26ef47d76c138c5
SHA512 e80e94e9725519e9470d438be7dff851cdc3efd331d7ef3ea003f721d6be758389eed5475a0c7295b8ae74cae85d070d4d0e7b99b506ea5db1d9d2970fc5e6e5
SSDEEP 24576:UB/fTEd11S3sO8S/SqaICBELetEYNUpLhwa/s3BgFBvyqzfNWqWyyYXs2N5:q/fTEdPdovC+LeLUjwaeBgn62NayyYX3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

12KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

51KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

126KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

lhftpbak/备份配置.ini

SHA256 69d35efe40ff87212fd683630c967d138c50ff18a6245875b488aa6857d93609
MD5 0958486291b353e5efa03ba703cacb78
SHA1 001ebb7eb64e1d5decaddf09870953a282c1e7b8
SHA512 1855c68354706fc62a369867ff7a74f3e2418dafb705ecca1f9c0629629372611aa84488f5749dab0764dde885d2af658f3ba067157ed5fd4359de99c3efa8eb
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer