Overview

overview

6

Static

static

5

cvery.comv...id.bat

windows7-x64

5

cvery.comv...id.bat

windows10-2004-x64

5

cvery.comv...na.url

windows7-x64

6

cvery.comv...na.url

windows10-2004-x64

3

cvery.comv...px.exe

windows7-x64

5

cvery.comv...px.exe

windows10-2004-x64

5

cvery.comv...��.exe

windows7-x64

5

cvery.comv...��.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    f63a75634347276c5e2caea8f0257b2d_JaffaCakes118

  • Size

    134KB

  • MD5

    f63a75634347276c5e2caea8f0257b2d

  • SHA1

    1e095c20f485cf7991724bb2b01d17595527a5cf

  • SHA256

    734d2bb8fd65a0d447884178fb809fa09ef1a9929401ea906f3b419c7b847cc2

  • SHA512

    1b2e5f1eba54f60bbbc0ddbe93cd705910c29f655f7611ab38710f547931aa5a3f73ee20e2a01bc2901de26f0a9355f5977e19632e15b311191b9ede3557f04e

  • SSDEEP

    3072:Y+z67O7qPpuwJWsfXIcvpT2/e93a/OW+OSKmNzOY2tV/chok//Eq:Y+z6y7v4XIi2/eJa/OkSKPtV02wd

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f63a75634347276c5e2caea8f0257b2d_JaffaCakes118
    .rar
  • cvery.comvb82942342425/Form1.frm
  • cvery.comvb82942342425/Form1.frx
  • cvery.comvb82942342425/buid.bat
  • cvery.comvb82942342425/fxscfgwz_dll_7.ico
  • cvery.comvb82942342425/rpclutil_cn_dll_5.ico
  • cvery.comvb82942342425/sourcecodechina.url
  • cvery.comvb82942342425/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comvb82942342425/下载说明.htm
    .html .js polyglot
  • cvery.comvb82942342425/工程1.RES
  • cvery.comvb82942342425/工程1.vbp
  • cvery.comvb82942342425/工程1.vbw
  • cvery.comvb82942342425/迷你网络校时.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections