Overview

overview

7

Static

static

7

天安VPN3.2/SKY.dll

windows7-x64

7

天安VPN3.2/SKY.dll

windows10-2004-x64

7

天安VPN3...PN.exe

windows7-x64

7

天安VPN3...PN.exe

windows10-2004-x64

1

天安VPN3...��.url

windows7-x64

1

天安VPN3...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    215993a9ab090be1f7c9c460bf8b813a_JaffaCakes118

  • Size

    520KB

  • MD5

    215993a9ab090be1f7c9c460bf8b813a

  • SHA1

    2a5d64b6237cd429863a5c17415e18a148594772

  • SHA256

    c8c1998226fe6a7784f1a396f9e634d8ba961f2fb1f6423b6dde5857d8fc4111

  • SHA512

    4d44fc0896446de171e0b39959d7e4bb3b0d08012557f3473924f73548b5398aaf7bd088b838bde3a4dc074e06bb54b292b3adbe2b0932d5a1fa46c62d708696

  • SSDEEP

    12288:CCfhIScm4+zrVAfptIXHefJ0tuURoYLhLCOFauT1zwlid0q:CCJYmVzrVeIXUitu4o0CmJzwlid0q

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 215993a9ab090be1f7c9c460bf8b813a_JaffaCakes118
    .rar
  • 天安VPN3.2/SKY.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 天安VPN3.2/天安VPN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 天安VPN3.2/新云软件.url
    .url