Overview

overview

5

Static

static

5

dfwbdllts/...01.exe

windows7-x64

5

dfwbdllts/...01.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff54c1bdc355d822363aba6846bbc642_JaffaCakes118

  • Size

    409KB

  • MD5

    ff54c1bdc355d822363aba6846bbc642

  • SHA1

    c5b03334d70de3ffdd7cdbacabe29640d7f19be7

  • SHA256

    355e8728ff3232d770528462a5a0ee380cc9109b057fd1cddf595b90b1ecfb90

  • SHA512

    5691dd275c8ad2d5e93d3f9b56a5f98526abcf685357999600dd92a75606ca26823542489262fb5402a3839cb76ebb50cc5963dd30547a86f7597934b6daab2b

  • SSDEEP

    12288:/j91ttm3tnz7Qf9A6Nz3Zf0P3tY4ncfJMX8XjS:r91zm3FQf95h35K63jS

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff54c1bdc355d822363aba6846bbc642_JaffaCakes118
    .rar
  • dfwbdllts/initSys.ini
  • dfwbdllts/大富翁宝贝流量提升专家V1.01.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections