Overview

overview

7

Static

static

7

ctbanlv.exe

windows7-x64

7

ctbanlv.exe

windows10-2004-x64

7

ii23_zx/�...��.url

windows7-x64

1

ii23_zx/�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aff498921b4326d76f25632dc02b43a3_JaffaCakes118

  • Size

    922KB

  • MD5

    aff498921b4326d76f25632dc02b43a3

  • SHA1

    b79ff9196cfee2ff73653bf1e66be14da18642f9

  • SHA256

    a0d36cde74916575b69c64047922e6ab752c07d6953c9ec34017ec670b5ba0f3

  • SHA512

    8f5716bdea53a7c5aa6a5b3a5e49b3852ae359d78ec845abcaba4568fc392e72f39e82c66156befe0caa5ba6fd930aba1346dcfd5bf7937e3f5c8f45182351a3

  • SSDEEP

    24576:4/G4huN/+XqBIp69RLxyuXGyUpog10p3YV+Po:4/G2k/C2EuPUpog12Po

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aff498921b4326d76f25632dc02b43a3_JaffaCakes118
    .rar
  • ct_data_zh_CN.xml
    .xml
  • ctbanlv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ctbanlv.up
  • ii23_zx/1-13级均可使用（能达到每个级别的速度上限，且最省雇员，餐室不一样请使用自动进位功能）X=11Y=12.ii23_zx
  • ii23_zx/新云软件.url
    .url
  • ii23_zx/自动最优化摆桌.jpg
    .jpg
  • ii23_zx/自动最优化摆桌X=8Y=7.ii23_zx
  • ii23_zx/自动最优化摆桌说明.txt
  • 保留原配置及账号方法、帮助文档.txt
  • 免责声明 .txt
  • 无法打开请看.txt
  • 更新日志.txt