Overview

overview

7

Static

static

3

yongshuoep...�-.exe

windows7-x64

7

yongshuoep...�-.exe

windows10-2004-x64

7

yongshuoep...��.url

windows7-x64

1

yongshuoep...��.url

windows10-2004-x64

1

绿盟 - 2...��.url

windows7-x64

1

绿盟 - 2...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e954c670b265dd8a6b6d9ca1aa04048_JaffaCakes118

  • Size

    420KB

  • MD5

    8e954c670b265dd8a6b6d9ca1aa04048

  • SHA1

    c6ff08f8eda44372eac0c23a4c4a03e290feaf47

  • SHA256

    8bc90236b2f63f5992bb0e09fc6fd5c86e8a88bbf6740127f34948977a3ed02c

  • SHA512

    dd829d22c471486a6ae8b564f322e012519a0b98a077aab5fa114d588132ac1cd43c234c94cb7eedad3f13684cda53dd333ab288d37792c449d319df0a16b656

  • SSDEEP

    12288:ezi+Z74J+wcXjqY8sljwu25U1KzHJhLzF2eTBGQ:ez/Bc+XnljwRdxHTAQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e954c670b265dd8a6b6d9ca1aa04048_JaffaCakes118
    .rar
  • yongshuoepm/1.txt
  • yongshuoepm/永硕E盘-密码暴力破解-.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • yongshuoepm/绿盟 - 20万免费软件让你淘！.url
    .url
  • 绿盟 - 20万免费软件让你淘！.url
    .url