Overview

overview

7

Static

static

7

极限启�...za.exe

windows7-x64

7

极限启�...za.exe

windows10-2004-x64

7

极限启�...v3.exe

windows7-x64

3

极限启�...v3.exe

windows10-2004-x64

3

极限启�...II.exe

windows7-x64

3

极限启�...II.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    822a6012a1cc42371dc31746d7c3e87b_JaffaCakes118

  • Size

    881KB

  • MD5

    822a6012a1cc42371dc31746d7c3e87b

  • SHA1

    369f2559cee0dec35bc1a0080988e5fca7db9b87

  • SHA256

    fa2ac1eb77cb60e3900da3c0f0e61bb655f3cfed1be323c1d2e2eec79677340f

  • SHA512

    51bf045ae9a1708974a545db32496c88a51dfb9e35dad39881f864a01df1cfc54a76861b123f65a4a90af305b7763f5014720afee910426ea471126d975f5a98

  • SSDEEP

    24576:XBi17H+pkwg6X4ieC+jtjKQFpweHXwuND:XIAbg04iczHnHXB

Score
7/10
upxaspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 822a6012a1cc42371dc31746d7c3e87b_JaffaCakes118
    .rar
  • 极限启动1005e/update/7za.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 极限启动1005e/update/update v3.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 极限启动1005e/极限启动II.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections