Overview

overview

7

Static

static

7

RVM_Integr....2.exe

windows7-x64

7

RVM_Integr....2.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f32f7d0e1713e7b62e8dd463ca779df_JaffaCakes118

  • Size

    979KB

  • MD5

    0f32f7d0e1713e7b62e8dd463ca779df

  • SHA1

    2d7b73a2c8d110b2112ac6ba07e8b7303dc6172d

  • SHA256

    774d73c7033409527b52a1a3185b10c619957d9f4fe5d04c47a72b4cd190f514

  • SHA512

    03e2d24eef506a6e63c48454d3dfcec5248f6777948d39230c59d0b15c122cf1e040bdf74a60f95854d9f99c723535b1e400e0d3829cea372624fff2d8a9f468

  • SSDEEP

    24576:DHFHwboiJ+E9eO/sAajND7wESbDqTdtvqAXps/:D9w0iJOO/9a7HR3s/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f32f7d0e1713e7b62e8dd463ca779df_JaffaCakes118
    .rar
  • RVM_Integrator_1.5.2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url