Overview

overview

10

Static

static

7

工具/zlib.dll

windows7-x64

3

工具/zlib.dll

windows10-2004-x64

3

工具/手...��.exe

windows7-x64

7

工具/手...��.exe

windows10-2004-x64

7

工具/手...rv.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f99c20509c4aa43355e82a97a5740e1_JaffaCakes118

  • Size

    1.4MB

  • MD5

    5f99c20509c4aa43355e82a97a5740e1

  • SHA1

    126ae07e3c07b3613443f36fed88c474c28d70be

  • SHA256

    a6ae711677ff8cd3560080856edb73c53059cf5de6b41385a53ae81b8a6cb6e3

  • SHA512

    85af1796989b29e8f24ed08fd57a3d843e5d879579d21ff118b7c17ea7ba367686aeb696f9794a636223db2f9b35a3122d6c00b3af1971b3e05f777a05b69391

  • SSDEEP

    24576:9gLAG64tNISR11lMi7d3nKPazF03DIVkm2mTIAv/BEqAbo8MZTz8tpze:9gUGltSO7d3Wazi3sym6AX53ZZn8tpa

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f99c20509c4aa43355e82a97a5740e1_JaffaCakes118
    .zip
  • 工具/Skin/adduser.png
    .png
  • 工具/Skin/bg4.png
    .png
  • 工具/Skin/menu_switch.png
    .png
  • 工具/cursor.cur
  • 工具/cursor_down.cur
  • 工具/zlib.dll
    .dll windows:4 windows x86 arch:x86

    7e3560e4dd2deaa398fa039458dd4b4b


    Headers

    Imports

    Exports

    Sections

  • 工具/手机号码注册过的网站查询.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 工具/手机号码注册过的网站查询Srv.exe
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • 工具/脱离此文件夹工具将无法运行.ini