General
-
Target
debf1a6e4fb720247d2b614b4c6990f1_JaffaCakes118
-
Size
1.9MB
-
MD5
debf1a6e4fb720247d2b614b4c6990f1
-
SHA1
9511196501e82e7de0d9d5d2c507b5db7084b746
-
SHA256
7165fc143a4ac0d0fd3bfffd78430e900f5707ee6de9651820add9ca3ea469bc
-
SHA512
adc942241e8e52e19937b4cb8fd4de56e3f2af3dad345bce018c7302314897871a02b7d456c70b0796dccb13bc7a6e797d1fb5270b3b6635d58c60afd4f6725c
-
SSDEEP
49152:a3mWCgCYjyVcX7PNNBpjBlqAwRmhEFiPF2hzDNXzO/0uetGL7:a3mWayTX7lpqAsFiMhnNDI
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
Files
-
debf1a6e4fb720247d2b614b4c6990f1_JaffaCakes118
-
vpnclient/28ip.html
-
vpnclient/gonggao.htm
-
vpnclient/images/Thumbs.db
-
vpnclient/images/gonggao.gif
-
vpnclient/images/khd.css
-
vpnclient/images/wenzi_1.jpg
-
vpnclient/images/wenzi_2.jpg
-
vpnclient/images/wenzi_bt.jpg
-
vpnclient/images/wenzi_left.jpg
-
vpnclient/images/zhuce.gif
-
vpnclient/ip.html
-
vpnclient/ssm.html
-
vpnclient/top.htm
-
vpnclient/toppic.jpg
-
vpnclient/toppic222.jpg
-
vpnclient/vpnlist.txt
-
vpnclient/vpnlisten.txt
-
vpnclient/youyou.ico
-
vpnclient/yyvpnip.html
-
vpnclient/新建 文本文档.txt
-
vpnclient2/28vpn.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/28vpn_en_5.0.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/28vpn_zh_5.0.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/gonggao.htm
-
vpnclient2/images/1.gif
-
vpnclient2/images/2.gif
-
vpnclient2/images/3.gif
-
vpnclient2/images/Thumbs.db
-
vpnclient2/images/gonggao.gif
-
vpnclient2/images/khd.css
-
vpnclient2/images/wenzi_1.jpg
-
vpnclient2/images/wenzi_2.jpg
-
vpnclient2/images/wenzi_bt.jpg
-
vpnclient2/images/wenzi_left.jpg
-
vpnclient2/images/zhuce.gif
-
vpnclient2/top.htm
-
vpnclient2/top.rar
-
top.htm
-
vpnclient2/toppic88888.jpg
-
vpnclient2/vpnclient2.lnk
-
vpnclient2/vpnlist.txt
-
vpnclient2/vpnlisten.txt
-
vpnclient2/youyou.ico
-
vpnclient2/复件 (2) top.htm
-
vpnclient2/复件 top.htm