Overview

overview

7

Static

static

5

PPtool/Newprep.exe

windows7-x64

5

PPtool/Newprep.exe

windows10-2004-x64

5

PPtool/PPtool_10.exe

windows7-x64

7

PPtool/PPtool_10.exe

windows10-2004-x64

7

PPtool/统...��.url

windows7-x64

1

PPtool/统...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    25101347c6a654ed415af110d6ef0e5e_JaffaCakes118

  • Size

    12.8MB

  • MD5

    25101347c6a654ed415af110d6ef0e5e

  • SHA1

    e29d0741fba017dcafde763a93a03437f17cb13c

  • SHA256

    5aae5ffc7d63c7dc341607b931cdafb8eee13ddeb94e680f3c91a8f25542663e

  • SHA512

    f90965bb4105ac0a91d171a6aff7905fbde85baabd1824a881989224ede3902dfc814ce432ec2d5a5f71c7a202f30f2e8ba4efd9eb7bdba68e0c2dd5c3577b0b

  • SSDEEP

    393216:nwTygaNUIFI0uECFNggkwXlcRzIBxkOOg:bxGqI0PCkx9g

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 25101347c6a654ed415af110d6ef0e5e_JaffaCakes118
    .rar
  • PPtool/Newprep.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • PPtool/PPtool_10.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • PPtool/sysprep/Newprep.ini
  • PPtool/sysprep/sysprep.inf
  • PPtool/使用说明.txt
  • PPtool/统一下载站.url
    .url
  • PPtool/说明.txt