Overview

overview

7

Static

static

7

ChinaFTP/ChinaFTP.exe

windows7-x64

7

ChinaFTP/ChinaFTP.exe

windows10-2004-x64

7

ChinaFTP/C...lp.chm

windows7-x64

1

ChinaFTP/C...lp.chm

windows10-2004-x64

1

ChinaFTP/c...an.exe

windows7-x64

7

ChinaFTP/c...an.exe

windows10-2004-x64

7

ChinaFTP/c...te.exe

windows7-x64

7

ChinaFTP/c...te.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3ea20bc19c9feffc73abfb17388e5ac_JaffaCakes118

  • Size

    1.2MB

  • MD5

    d3ea20bc19c9feffc73abfb17388e5ac

  • SHA1

    e52aaea7a2cbeef0e65c929e071e5999f15c01e6

  • SHA256

    3ecba721e4124d2897104d4d342df8dc052e6e4ad5707d2cacec8857649dcbfa

  • SHA512

    ae20f1bfa25dbbee38a18ce2670521b3403dd08d67c65965bdd7cb81382d39834c904f824f6c210eb3fc42cadd82ea57208e87fdf5e2c64f569b47ccc3a95115

  • SSDEEP

    24576:wVbyRXPuSdtejJoVwERy5/AA1kYlUOg2qCe4g1Fk5eAbjx0z/0q8oaROu:wJYtVww3AyYlCt3FhA3qL0qraROu

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d3ea20bc19c9feffc73abfb17388e5ac_JaffaCakes118
    .rar
  • ChinaFTP/ChinaFTP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ChinaFTP/ChinaFTPhlp.chm
    .chm
  • ChinaFTP/chinaftpscan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ChinaFTP/chinaftpupdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ChinaFTP/wav/downloadover.wav
  • ChinaFTP/wav/uploadover.wav