Overview

overview

7

Static

static

5

ESET_VC52_...ID.exe

windows7-x64

7

ESET_VC52_...ID.exe

windows10-2004-x64

7

ESET_VC52_...��.bat

windows7-x64

1

ESET_VC52_...��.bat

windows10-2004-x64

1

ESET_VC52_...��.url

windows7-x64

1

ESET_VC52_...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    faf93446fb3624bbfa5d8fdd3c7f496d_JaffaCakes118

  • Size

    276KB

  • MD5

    faf93446fb3624bbfa5d8fdd3c7f496d

  • SHA1

    e9dcd3bf748fbbceac59942c7b4c50d102f152a4

  • SHA256

    494f0ec074f827163e8b7ab7f0f1ba092fee925f08f873700a397032f85c3d9d

  • SHA512

    cad9af1f7536163d7602a64ba6f497f06ab598e138117b93dd97be0f3f74df7d4bd91011be68311e56bb5299020afd15a387cab38df3305048fc40e7452dca1a

  • SSDEEP

    6144:GJ8knyZVCi58uO6svu9QAuxNS4+ywm5yvqYSjx/xkJqxK2kVHsDGw:GJ8syZV58ju9Qb1Z5yvqxtUqxK2kdsDZ

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • faf93446fb3624bbfa5d8fdd3c7f496d_JaffaCakes118
    .rar
  • ESET_VC52_AUTOID_v1.7.0.4_x64/ESET_VC52_AUTOID.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ESET_VC52_AUTOID_v1.7.0.4_x64/v1.7.0.4升级说明.txt
  • ESET_VC52_AUTOID_v1.7.0.4_x64/手动更新.bat
  • ESET_VC52_AUTOID_v1.7.0.4_x64/新云软件.url
    .url