Overview

overview

3

Static

static

3

ARP联盟.url

windows7-x64

1

ARP联盟.url

windows10-2004-x64

1

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

大飞穿�...62.exe

windows7-x64

3

大飞穿�...62.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0415eaf376eb7aa72a8f371690184821_JaffaCakes118

  • Size

    1.8MB

  • MD5

    0415eaf376eb7aa72a8f371690184821

  • SHA1

    f255d1e9d302d73eb93116262fb6c49c42e70147

  • SHA256

    5517e44490ebb15e97f46aa734a06242028323919327688a19804ae661e2d957

  • SHA512

    6f9118ef08c575acf7770e51f4cc8c1e0f28b5dfba35d4455d4a7363aa30174e3b997c8409491d9561e17a84a6c326b24819f6a084297ab96802a21e3f3737e6

  • SSDEEP

    49152:UK/e9j2D8tS4w/3Pgk6stR1fxlo4kKowb:UKu2jl/MstPSKo8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0415eaf376eb7aa72a8f371690184821_JaffaCakes118
    .rar
  • ARP联盟.url
  • 使用说明.url
  • 大飞穿越火线外挂集合06262.exe
    .exe windows:4 windows x86 arch:x86

    87b324a67e18fb2e1d12308b06fa8d4f


    Headers

    Imports

    Sections