General

  • Target

    afb8b69edc93e072df29432007a1a5b6_JaffaCakes118

  • Size

    3.8MB

  • MD5

    afb8b69edc93e072df29432007a1a5b6

  • SHA1

    c47b0a5d79dfc11b91300691986aa1916da6776c

  • SHA256

    f69178a38bcfb41e3d553f6b049618b68d839743e268c0e363b17435c9dff19f

  • SHA512

    fa782d2bbc2a7cfec579b93ff41ba9ef529eb84629a014606acf8dc8c6e9a26490965f501d1fd10d796f526e6bcdd4da53685fbb9e637d35f2a1d9f662965279

  • SSDEEP

    98304:yoSulPu3JQF1oZRISxO+Q/lN6I3wa4+7vXxhWHs:yoSYSlTI0Ox/lz395vX+s

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

Files

  • afb8b69edc93e072df29432007a1a5b6_JaffaCakes118
    .rar
  • TUGZip 3.50/!使用前必看.txt
  • TUGZip 3.50/Help.chm
    .chm
  • TUGZip 3.50/Languages/chinese(simplified).ini
  • TUGZip 3.50/Plugins/7-zip32.dll
    .dll windows:4 windows x86 arch:x86

    a8d40e7acff8d19b08ba905fc5e46eba


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/Sqx.dll
    .dll windows:4 windows x86 arch:x86

    be9214fe3e3dbab01eccc9cdfbfc5f56


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/Tar32.dll
    .dll windows:4 windows x86 arch:x86

    e5dc618dff2e177e56c1c0072e6d34b6


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/TzArchive10.tgp
    .dll windows:4 windows x86 arch:x86

    47efb2ddc689ea46a6db455949b7f853


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/TzImage10.tgp
    .dll windows:4 windows x86 arch:x86

    34ff24a8a1fac411d1b874cb9cf50593


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/Ungca32.dll
    .dll windows:4 windows x86 arch:x86

    cc6984edd93fb2f099a37bff4873285e


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Plugins/Yz1.dll
    .dll windows:4 windows x86 arch:x86

    911279601af45dcfba50cac3f3e37212


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/SqxLib.zzl
    .dll windows:4 windows x86 arch:x86

    701f5e07fadf31e1edbe09c98e50777d


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/Stubs/tz_7z.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_ace.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_cab.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_enc_dos.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_enc_win.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_lzh.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_rar.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/Stubs/tz_zip.sfx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TUGZip 3.50/TUGZip.exe
    .exe windows:4 windows x86 arch:x86

    7e99dd59c9ad71c6f12e87b9d2964b92


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/TzCrypt.dll
    .dll windows:4 windows x86 arch:x86

    5fd53b0d7f4a502ca083da30fed96c89


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/TzRes.dll
    .dll windows:4 windows x86 arch:x86

    919b6f3405c36f1a9c0ab39dee1803da


    Headers

    Imports

    Sections

  • TUGZip 3.50/TzSFX.exe
    .exe windows:4 windows x86 arch:x86

    211adb4891d5dc9ec712e84da5a3d9fe


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/TzScript.exe
    .exe windows:4 windows x86 arch:x86

    0cf0dd0ec28ac69b6b02ed48bd7fd134


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/TzShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eb9df549f871e0d1a781614f7e07b5e1


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/TzUpdate.exe
    .exe windows:4 windows x86 arch:x86

    b8ff259ea4946294558216d491f5e30c


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/js32.dll
    .dll windows:4 windows x86 arch:x86

    d4cf53410aaf282f4402dc93df0b45e8


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/ztvcabinet.dll
    .dll windows:5 windows x86 arch:x86

    ea4cbf3c305bfb43c7e36a485e58acb4


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/ztvunace26.dll
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/ztvunrar36.dll
    .dll windows:4 windows x86 arch:x86

    244d2f9772f4886a651db44514a2a29b


    Headers

    Imports

    Exports

    Sections

  • TUGZip 3.50/新云软件.url
    .url