Overview

overview

6

Static

static

5

arpfreezeN...ng.exe

windows7-x64

6

arpfreezeN...ng.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    38b346fb49cbfcfc4ace360312f1b7d4_JaffaCakes118

  • Size

    365KB

  • MD5

    38b346fb49cbfcfc4ace360312f1b7d4

  • SHA1

    9594bed01356483c4b23561799456e324d17c050

  • SHA256

    ae452419b405568e17483986d115bd89b3171c79586b9149468012d79b8724a7

  • SHA512

    e2f11cecee43193dff5215c43fa3243b69566f5bee461b508bc7c0712acd980310863e66a924ea04f58841bacd3b5f58ccaf7cf5996c5b9034dd573472681575

  • SSDEEP

    6144:Xbvr/+zFdS9JwL0LoEmLkHm+ZcWk1B6ktkAh26dNdnxjVRFsVk4l+KCfs79:XbvridqwLQEgHfI1v656fjVREkfKR79

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 38b346fb49cbfcfc4ace360312f1b7d4_JaffaCakes118
    .zip
  • arpfreezeNG/arpfreezeng.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • arpfreezeNG/source/arpfreeze.ico
  • arpfreezeNG/source/arpfreezeNG.au3