General

  • Target

    71ab589c9c90cd6548814a8a677eacee_JaffaCakes118

  • Size

    3.7MB

  • MD5

    71ab589c9c90cd6548814a8a677eacee

  • SHA1

    6f81363ab77440ed593a544cc12602b5c9e9ff31

  • SHA256

    905e3de1eca7261ea5bfe356ffc7c44017998521e9e872c9870247e9677b0eff

  • SHA512

    db885fba552914b8fd704078ea60450beb3cfd1b43d5537d439ed2bbb397a0086d19cbdd7ce4e8241982a8a2f4eb9d67c7c31c40201c9457380ea02f6d32ba2a

  • SSDEEP

    98304:Y2PE0OD60YRIHtfAu3+TsDQIjW+d6HDBJh5U+6o4sylzcJjqSl:/P1+60YUREqak6ND5UBo8dijHl

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 71ab589c9c90cd6548814a8a677eacee_JaffaCakes118
    .rar
  • account V2.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • help.chm
    .chm
  • ico/add.ico
  • ico/bak.ico
  • ico/conifg.ico
  • ico/del.ico
  • ico/exit.ico
  • ico/help.ico
  • ico/look.ico
  • ico/pw.ico
  • ico/新云软件.url
    .url
  • kernel32.dll
    .dll windows:5 windows x86 arch:x86

    acf57332eed5cdcdbd0cad6f75b825b3


    Headers

    Imports

    Exports

    Sections

  • ksoft.mdb
  • ntdll.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • shlwapi.dll
    .dll windows:5 windows x86 arch:x86

    3874baf26fd1a53b36c70fbf70c24eda


    Headers

    Imports

    Exports

    Sections

  • 使用说明.txt
  • 官方网站.url
  • 默认密码.txt