Overview

overview

5

Static

static

5

050a.exe

windows7-x64

5

050a.exe

windows10-2004-x64

5

免费电�...��.url

windows7-x64

1

免费电�...��.url

windows10-2004-x64

1

大量破�......url

windows7-x64

1

大量破�......url

windows10-2004-x64

1

更多软件.url

windows7-x64

1

更多软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ae94f7dd9869e17963f4632e6d23463_JaffaCakes118

  • Size

    672KB

  • MD5

    0ae94f7dd9869e17963f4632e6d23463

  • SHA1

    c9ec15826754ab1871c100556f8b474179ff165e

  • SHA256

    c53d5a16921e9915152c9f94b42473cd050d720278be5ecd31bb53516a6e3acc

  • SHA512

    61f1454c70ffa25c41018810950c6a1040520d723a414ed4e28bdee9650fe3a04a98a83be00a74e059887d943aa5f779fcda3b6d5b4e291b2c3e7565ca6e7e4d

  • SSDEEP

    12288:SGDzN93OrC139rg+uCqR8NbBWsJIBcECTqeE39kDw/KQyqCEd7:SGDzqChlg+z/NzJIK6Dnd7

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ae94f7dd9869e17963f4632e6d23463_JaffaCakes118
    .rar
  • 050a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • redme.txt
  • 免费电话_免费打手机、座机、小灵通_铁通RedVIP网络电话.url
    .url
  • 大量破解软件下载....url
  • 更多软件.url