Overview

overview

7

Static

static

7

3389端口...��.exe

windows7-x64

7

3389端口...��.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4d963d99d8f3265e1680ac83363496c_JaffaCakes118

  • Size

    286KB

  • MD5

    b4d963d99d8f3265e1680ac83363496c

  • SHA1

    e5f07a2686d54e4ed5a0a05f79080cde71c1bdcc

  • SHA256

    0e6db81fe473b00a171176ab61bbdcf826761ce1adb44b922eb76cc4fef0833a

  • SHA512

    7d320c7442d3799727cfcb4ee81946f3bc9c3c64d2d253b52c79c1220c12c9a3ad82eb4a35e5f9b522dfb41ab5fe1eca0a9226c0ed3524533a3680534a511114

  • SSDEEP

    6144:rHlx886dJOaAYbd1Bh37X1onBCvU2gRcaB7e85imRc4gj6llK:Dg86dJOaA+d1TrFoBiU2KBC47lY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4d963d99d8f3265e1680ac83363496c_JaffaCakes118
    .rar
  • 3389端口修改工具.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url