Overview

overview

3

Static

static

3

CirusPad(b...5).exe

windows7-x64

3

CirusPad(b...5).exe

windows10-2004-x64

3

Ciruspad/Form1.vbs

windows7-x64

1

Ciruspad/Form1.vbs

windows10-2004-x64

1

VB程序太平洋.exe

windows7-x64

3

VB程序太平洋.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb11f010df13a17b1cf8e8bbdf676201_JaffaCakes118

  • Size

    23KB

  • MD5

    bb11f010df13a17b1cf8e8bbdf676201

  • SHA1

    25c3a1f7402a3b476bf850f97650639237db7978

  • SHA256

    a96631eedcb77b0496dd4667ec9d0d3e85bd2f9ebca9be417089b812a8af9af4

  • SHA512

    9ce948e41b68634a1c6921a936a2ec238c16a783415c123dc7398f2f798013ee7c6cc91a687ea02a0a4a3f8e0a293186c76a2b3196a52f930dcf6eae7e17ced0

  • SSDEEP

    384:sbjRgWul0DgWa2WXg2UNZm4LB2kZHPBlxQYkQbZgmwNNb9B+k27OatE1dQ:sbyKa2eh4L4OHPfQQbfwfb98CatE1O

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bb11f010df13a17b1cf8e8bbdf676201_JaffaCakes118
    .rar
  • CirusPad(bete 1.5).exe
    .exe windows:4 windows x86 arch:x86

    29d1ec43f1440491980a102e2a6e733a


    Headers

    Imports

    Sections

  • Ciruspad/Form1.frm
    .vbs
  • Ciruspad/Form1.frx
  • Ciruspad/Form2.frm
  • Ciruspad/Form2.frx
  • Ciruspad/MDIForm1.frm
  • Ciruspad/Module1.bas
  • Ciruspad/Project1.vbp
  • Ciruspad/Project1.vbw
  • Ciruspad/下载说明.htm
    .html .js polyglot
  • VB程序太平洋.EXE
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot