Overview

overview

5

Static

static

5

HYjiaoshiv....6.exe

windows7-x64

5

HYjiaoshiv....6.exe

windows10-2004-x64

5

使用必读.url

windows7-x64

1

使用必读.url

windows10-2004-x64

1

绿色先�...��.url

windows7-x64

1

绿色先�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa6f4016cb5b386e829aa2ec07a1ea23_JaffaCakes118

  • Size

    653KB

  • MD5

    fa6f4016cb5b386e829aa2ec07a1ea23

  • SHA1

    578791b4c0a76f2254acad21688b9a6af6b95a50

  • SHA256

    6596b636a5f59624478dbb629101d467294fcba611cfc5f16831e4eb2b2b612a

  • SHA512

    2246c3fb2c556feb0bf84f40b4febba5b6daa15faee9c0989929465b467b2f39562b7634660430e04e2ba17e6b9780f2957a1de221d49d2792cd6e7b9fc122fb

  • SSDEEP

    12288:GUDCZLdpuWcu8LhAR4oT8RdqV+spcpuboCZowiq2BIe6qD9RwIrWBwN:ZCZLLbcpLu2o4R0V0C2Bz9hLrWCN

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa6f4016cb5b386e829aa2ec07a1ea23_JaffaCakes118
    .rar
  • HYjiaoshiv3.6/3.6MD5.txt
  • HYjiaoshiv3.6/红叶自动校时v3.6.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 使用必读.url
  • 绿色先锋下载.url
    .url