Overview

overview

7

Static

static

7

免改注�...er.exe

windows7-x64

7

免改注�...er.exe

windows10-2004-x64

7

极品飞�...��.exe

windows7-x64

7

极品飞�...��.exe

windows10-2004-x64

7

NfsMWTrainerV20.exe

windows7-x64

7

NfsMWTrainerV20.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b95db5c3f43411f9e4d7e014796deca7_JaffaCakes118

  • Size

    19.2MB

  • MD5

    b95db5c3f43411f9e4d7e014796deca7

  • SHA1

    bfd345d7d463248e010d4c01c72d7f7c51f56034

  • SHA256

    7046e9b2553cc60169c17d83f97ec35cfa1325b5e8899e98e7a528624ded46f2

  • SHA512

    51d71502e43dcc22c0eeadb59b54dcdf84c2959dfac9ca987d28fdd6acfa5c045a692513e859ecf936309a28ce2129e95b06163b77345ebbc7fc8e4da73872d1

  • SSDEEP

    393216:PmwV8AxWWolWbmb9WzLNNkm6cT6VKsGE5LmoIOapV/XkUcylZ1P9jISL0:+NqKTcTaKxE5LmoIOIKUciZ1P9/I

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b95db5c3f43411f9e4d7e014796deca7_JaffaCakes118
    .rar
  • NFS9生涯100%+70关+可修改的32辆车全修改为拓荒者存档.rar
    .rar
  • bigboy/bigboy
  • NFS9隐藏模式开启方法.txt
  • 下载说明.htm
    .html .js polyglot
  • 免改注册表模拟方式免CD补丁/ALI213.txt
  • 免改注册表模拟方式免CD补丁/speed_loader.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 免改注册表模拟方式免CD补丁/下载说明.htm
    .html .js polyglot
  • 动态模糊开关补丁/DisableMotionBlur.reg
  • 动态模糊开关补丁/EnableMotionBlur.reg
  • 动态模糊开关补丁/下载说明.htm
    .html .js polyglot
  • 极品9大地图第四版.jpg
    .jpg
  • 极品飞车9中文升级补丁v1.3/NFSMWpatch1.3TC-C中文版.exe
    .exe windows:1 windows x86 arch:x86

    a07b72e5e585908fbc603a8a00070663


    Headers

    Imports

    Sections

  • 极品飞车9中文升级补丁v1.3/说明文档.txt
  • 極品飛車9全民公敵中文版修改器v2.0.rar
    .rar
  • NfsMWTrainerV20.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 说明.txt