Overview

overview

7

Static

static

7

PhotoRescu...se.htm

windows7-x64

3

PhotoRescu...se.htm

windows10-2004-x64

3

PhotoRescu...r.html

windows7-x64

3

PhotoRescu...r.html

windows10-2004-x64

3

PhotoRescu...x.html

windows7-x64

3

PhotoRescu...x.html

windows10-2004-x64

3

PhotoRescu...lib.js

windows7-x64

3

PhotoRescu...lib.js

windows10-2004-x64

3

PhotoRescu...ro.dll

windows7-x64

3

PhotoRescu...ro.dll

windows10-2004-x64

3

PhotoRescu...ro.exe

windows7-x64

6

PhotoRescu...ro.exe

windows10-2004-x64

6

PhotoRescu...ro.url

windows7-x64

1

PhotoRescu...ro.url

windows10-2004-x64

1

PhotoRescu...es.htm

windows7-x64

3

PhotoRescu...es.htm

windows10-2004-x64

3

PhotoRescu...Hs.exe

windows7-x64

7

PhotoRescu...Hs.exe

windows10-2004-x64

7

PhotoRescu...ro.chm

windows7-x64

1

PhotoRescu...ro.chm

windows10-2004-x64

1

PhotoRescu...��.url

windows7-x64

1

PhotoRescu...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    729f4a2b1d6c72536ba03da4cf1ef1d6_JaffaCakes118

  • Size

    1.5MB

  • MD5

    729f4a2b1d6c72536ba03da4cf1ef1d6

  • SHA1

    9e48e770e3816964020cc91c222456b67574e17a

  • SHA256

    de90231e3c8cca7b7db78f41d0ea04bbc867223fd828de4b29aaafd4822b87d4

  • SHA512

    c21f5cd2b6db32ad4469e574b1d3bac16770a09f63fabd022770c37a6dd889404bf737b4ecc18b0ad76cba0a839ddc135a652fc84ec2fcce71842efd09c3d7c2

  • SSDEEP

    24576:ZghyYZ30GLYsU/FLN+8Ec/Ll5R6ksIn2qj+fj/WQLPZGUhpG4SGW8IWRDh87:ZghHFLYsUNLNE6UYfKDW6G58IoDhe

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 729f4a2b1d6c72536ba03da4cf1ef1d6_JaffaCakes118
    .rar
  • PhotoRescue Pro/!)卸载.reg
  • PhotoRescue Pro/!)注册.reg
  • PhotoRescue Pro/Application.ico
  • PhotoRescue Pro/Languages/AEnglish.lng
  • PhotoRescue Pro/Languages/Arabic.lng
  • PhotoRescue Pro/Languages/Catalan.lng
  • PhotoRescue Pro/Languages/Chinese Traditional.lng
  • PhotoRescue Pro/Languages/Deutsch.lng
  • PhotoRescue Pro/Languages/English.lng
  • PhotoRescue Pro/Languages/Greek.lng
  • PhotoRescue Pro/Languages/Hungarian.lng
  • PhotoRescue Pro/Languages/Italian.lng
  • PhotoRescue Pro/Languages/Nederlands.lng
  • PhotoRescue Pro/Languages/Polish.lng
  • PhotoRescue Pro/Languages/Russian.lng
  • PhotoRescue Pro/License.htm
    .html
  • PhotoRescue Pro/Media/WizardBar.html
    .html
  • PhotoRescue Pro/Media/css.css
  • PhotoRescue Pro/Media/images/arr1.gif
    .gif
  • PhotoRescue Pro/Media/images/icon_all_format.jpg
    .jpg
  • PhotoRescue Pro/Media/images/icon_earth.gif
    .gif
  • PhotoRescue Pro/Media/images/icon_key.gif
    .gif
  • PhotoRescue Pro/Media/images/left_bott.jpg
    .jpg
  • PhotoRescue Pro/Media/images/left_mid.jpg
    .jpg
  • PhotoRescue Pro/Media/images/left_top.jpg
    .jpg
  • PhotoRescue Pro/Media/images/main.gif
    .gif
  • PhotoRescue Pro/Media/index.html
    .html
  • PhotoRescue Pro/Media/jslib.js
    .js
  • PhotoRescue Pro/PhotoRescuePro.dll
    .dll windows:4 windows x86 arch:x86

    eecd7e1cc13cd774b6e071f02cf8562c


    Headers

    Imports

    Exports

    Sections

  • PhotoRescue Pro/PhotoRescuePro.exe
    .exe windows:5 windows x86 arch:x86

    2929067531526f65cd719a066eb8db4d


    Headers

    Imports

    Sections

  • PhotoRescue Pro/PhotoRescuePro.url
  • PhotoRescue Pro/ReleaseNotes.htm
    .html
  • PhotoRescue Pro/UninsHs.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PhotoRescue Pro/Uninstall.ico
  • PhotoRescue Pro/photorescuepro.chm
    .chm
  • PhotoRescue Pro/新云软件.url
    .url