Overview

overview

7

Static

static

7

河源下�...om.url

windows7-x64

1

河源下�...om.url

windows10-2004-x64

1

飘零4.0�...��.exe

windows7-x64

7

飘零4.0�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9a883a035107bc3621a7a6e2ce053876_JaffaCakes118

  • Size

    456KB

  • MD5

    9a883a035107bc3621a7a6e2ce053876

  • SHA1

    fb7be2bff820959db7435d92929258e0cb8a484e

  • SHA256

    d1426f73c993bcf63b968d3e198bf9d71a923a6e2dd593e6b385190d9b31c21c

  • SHA512

    996ad8bedaa9f1c423a67b5bbb735cb5a0109e8e3bfc2357a096c2d8b8f77e2b012e04b2c71440c4236fa18e2bf83ba05fee30a88d9512ce6fc6a4222796502c

  • SSDEEP

    12288:4msX9TxYIXxxCj2bXOvW+yUqo84ClG5WCUrlIX1ozjh0:ktTacxTloNmNrIY0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a883a035107bc3621a7a6e2ce053876_JaffaCakes118
    .rar
  • 河源下载站-xz7.com.url
    .url
  • 飘零4.0验证查询.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections