Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

服务删�...��.exe

windows7-x64

7

服务删�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb19f8d62473b20f6bc84ee07f6db2a1_JaffaCakes118

  • Size

    402KB

  • MD5

    eb19f8d62473b20f6bc84ee07f6db2a1

  • SHA1

    1dfa9d0eddde41b02f723be831ea8b4c7829a3b8

  • SHA256

    c6e0d08641b02a60833fe6286ab84eace32a0c5d152ffd25983b359e8021e7bd

  • SHA512

    233a18a0b8ddd3148423c9f4b5f9d352116dc5f2e974edf7d213a5ae0f4e210cbdb11ec8d137bb5893d4c3fa10aaf0f124a4f9736b9dabc91d3bc402f9f99a18

  • SSDEEP

    12288:/ST+pX893nH3J6PaE4syqOxItXHoRIKVwuS/6:vu3H3wz4DqO2t6IUwu86

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eb19f8d62473b20f6bc84ee07f6db2a1_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • 服务删除工具.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections