Overview

overview

7

Static

static

7

0Day Soft ...ru.url

windows7-x64

1

0Day Soft ...ru.url

windows10-2004-x64

1

Erstenware...ru.url

windows7-x64

1

Erstenware...ru.url

windows10-2004-x64

1

Erstenware...or.exe

windows7-x64

7

Erstenware...or.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf14a74af3ba2e7ea1df7af52a36e263_JaffaCakes118

  • Size

    327KB

  • MD5

    cf14a74af3ba2e7ea1df7af52a36e263

  • SHA1

    a606eb266b9f5c3afa99f5743245a1b96ef640d2

  • SHA256

    59727165c215f5bc1cc853460fb97fadd6970937ccf0dbb32ee5b0fb2a628c52

  • SHA512

    12e2514eac39eace101bda46dfdb9078101e7164cbb8f6767c02c755245a52557a842138de9f23ea71b5e2f14c1f60331215156d27996ed5594dcfec5c325bd2

  • SSDEEP

    6144:JbTQ+waydCVnWpe0GY/mBTiYy1dV5B8yIvMatTTqXLaLckq34gYW55Na:q+wpiWs0GY0ir1dV5VI9tC+LNqIr

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cf14a74af3ba2e7ea1df7af52a36e263_JaffaCakes118
    .rar
  • 0Day Soft - www.softnewsportal.ru.url
  • Erstenware.Signature.Creator.v1.12.43-CrackeD-ROGUE/0Day Soft - www.softnewsportal.ru.url
  • Erstenware.Signature.Creator.v1.12.43-CrackeD-ROGUE/FILE_ID.DIZ
  • Erstenware.Signature.Creator.v1.12.43-CrackeD-ROGUE/ROGUE.NFO
  • Erstenware.Signature.Creator.v1.12.43-CrackeD-ROGUE/signaturecreator.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections