Overview

overview

3

Static

static

3

天翼硬�...ic.exe

windows7-x64

3

天翼硬�...ic.exe

windows10-2004-x64

3

天翼硬�...��.exe

windows7-x64

3

天翼硬�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d5ad8cbf8f21351afc730f284008c12_JaffaCakes118

  • Size

    1.1MB

  • MD5

    0d5ad8cbf8f21351afc730f284008c12

  • SHA1

    dc774ad932170c43b745d377a7923aee423c488d

  • SHA256

    4bcd435555a00ac385b68baeb970f3ed8d5ccab9e38a39699d25c598be156716

  • SHA512

    a371117a2e080b7acb29571e388240851f91fd217ad5b4117a5a69d5bc4305d94243d111546d535f775ff5f6b8d4f7dc72008559821e27db49be502f95ff5a6a

  • SSDEEP

    24576:+z2QZ8sF63bgt2oXvHGOQEMYHzOsOCzna5VCh18kVK:+z2jsibUvmOvzHJHnCVC7B4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d5ad8cbf8f21351afc730f284008c12_JaffaCakes118
    .rar
  • 天翼硬加密设置/CasLic.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 天翼硬加密设置/服务清除工具.exe
    .exe windows:4 windows x86 arch:x86

    428d1bceda349bc0acd1b50b19e9e8e8


    Headers

    Imports

    Sections

  • 天翼硬加密设置/服务设置.txt