Overview

overview

7

Static

static

7

密保管�...ox.exe

windows7-x64

7

密保管�...ox.exe

windows10-2004-x64

7

密保管�...32.dll

windows7-x64

1

密保管�...32.dll

windows10-2004-x64

1

密保管�...pi.dll

windows7-x64

1

密保管�...pi.dll

windows10-2004-x64

1

密保管�...et.dll

windows7-x64

1

密保管�...et.dll

windows10-2004-x64

1

密保管�...��.url

windows7-x64

1

密保管�...��.url

windows10-2004-x64

1

密保管�...��.url

windows7-x64

1

密保管�...��.url

windows10-2004-x64

1

密保管�...��.url

windows7-x64

1

密保管�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40edc27abf52fccee0f75dfce5a43451_JaffaCakes118

  • Size

    1.7MB

  • MD5

    40edc27abf52fccee0f75dfce5a43451

  • SHA1

    e92e0b8beb1e48ebfab9ecf1540f70653a9c352a

  • SHA256

    b35dfdcab06b122e53b9474d28c3d54f2ff40fe1e5f8b5af655a727a96617595

  • SHA512

    c9848d2c48767cf871bf6dab63f5cf7a01c3199344601071cf6134942e3002f481649eb507b7120f4e26f35dd66100d98ad2939494c753051d36bd5cfc3b1f0e

  • SSDEEP

    49152:6eb5+xslWf9BdGsKAjK1GxPn0VJa1TxRwCovPub3:1ub8XA+gya1MdPm3

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 40edc27abf52fccee0f75dfce5a43451_JaffaCakes118
    .rar
  • 密保管家/Desktop.ini
  • 密保管家/PPBox.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 密保管家/help.mht
    .eml

    • http://sighttp.qq.com/authd?IDKEY=9d7240319547fd37e82991dd3762b4c89ec3c44b6f56f95f

    • http://www.ksjcf.com/

  • attachment-14
    .gif
  • email-html-1.txt
    .html
  • 密保管家/kernel32.dll
    .dll windows:5 windows x86 arch:x86

    acf57332eed5cdcdbd0cad6f75b825b3


    Headers

    Imports

    Exports

    Sections

  • 密保管家/ksoft1.mdb
  • 密保管家/mb.ico
  • 密保管家/new.wav
  • 密保管家/shlwapi.dll
    .dll windows:5 windows x86 arch:x86

    3874baf26fd1a53b36c70fbf70c24eda


    Headers

    Imports

    Exports

    Sections

  • 密保管家/wininet.dll
    .dll windows:5 windows x86 arch:x86

    b9075a73c1c0af544022cb1b875f75b0


    Headers

    Imports

    Exports

    Sections

  • 密保管家/使用说明.txt
  • 密保管家/安全报告V2.5版.url
  • 密保管家/官方网站.url
  • 密保管家/新云软件.url
    .url
  • 密保管家/更新说明.txt
  • 密保管家/病毒安全声明.txt