Overview

overview

7

Static

static

7

CFm4遁地...p1.exe

windows7-x64

7

CFm4遁地...p1.exe

windows10-2004-x64

7

CFm4遁地...��.url

windows7-x64

1

CFm4遁地...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8df187e105d93944660fc81d632b4b49_JaffaCakes118

  • Size

    673KB

  • MD5

    8df187e105d93944660fc81d632b4b49

  • SHA1

    f3fc60309c1454c7264a9200c07a5a7a646156ae

  • SHA256

    fc41f0576af825a324ea3df2294f6824a07dc34d50d7cc206f5551d8bf5d5b8f

  • SHA512

    7ca10dbf23cc7bafea1804aae352b25e573049aa92a79335f04c8e882725cc24cd7e737a00986cf017bd9ee26d37d8891165a10a6859eb7fbe584b1db10f5d44

  • SSDEEP

    12288:7gtrK6SqZUqvCpQ5JHultoVdkYbEBxFbtcbl6DlWWp6t5RV2lLfsQ2Q+Ay/2mT:7gU6Py0CpCZulUdkYbETTUl0UuSQLfsN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8df187e105d93944660fc81d632b4b49_JaffaCakes118
    .rar
  • CFm4遁地辅助网吧家庭通用版0602sp1/CFm4遁地辅助 网吧家庭通用版0602sp1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CFm4遁地辅助网吧家庭通用版0602sp1/使用说明.txt
  • CFm4遁地辅助网吧家庭通用版0602sp1/安装说明.url
    .url
  • CFm4遁地辅助网吧家庭通用版0602sp1/必须看的遁地位置1.jpg
    .jpg
  • CFm4遁地辅助网吧家庭通用版0602sp1/必须看的遁地位置2 (1).JPG
    .jpg