Overview

overview

7

Static

static

7

doctohtml/...ml.exe

windows7-x64

7

doctohtml/...ml.exe

windows10-2004-x64

7

doctohtml/...��.htm

windows7-x64

1

doctohtml/...��.htm

windows10-2004-x64

1

doctohtml/...��.url

windows7-x64

1

doctohtml/...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a431bcf80c9a597db3859d7513c83b7f_JaffaCakes118

  • Size

    315KB

  • MD5

    a431bcf80c9a597db3859d7513c83b7f

  • SHA1

    93d12a5ee6308f37178dd7d7fb833a14423b9174

  • SHA256

    97a49513526a9439d15bd201a615d1be27c378739d8f84210d0896a736f0afe5

  • SHA512

    8bfb480d93546c80733f098f42307a65fbc49f4b5336760e478d7cafd1697cbe3455443f29f90ec51d62f4db952a236d6d865f908fe57c72247a2ec0101eadc5

  • SSDEEP

    6144:iXRKTv/pvsIY9ttLSArvgeS7XuWQkrJ/dGIBUMXdjIKBM0JhrOQ:iX0Tvp2ttGArhSb6qdGIBUMtjIKBM4hP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a431bcf80c9a597db3859d7513c83b7f_JaffaCakes118
    .rar
  • doctohtml/doctohtml.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • doctohtml/必看说明.htm
  • doctohtml/河源下载站.url
    .url