Overview

overview

6

Static

static

5

bwlock_v20...��.url

windows7-x64

1

bwlock_v20...��.url

windows10-2004-x64

1

bwlock_v20...ck.chm

windows7-x64

1

bwlock_v20...ck.chm

windows10-2004-x64

1

bwlock_v20...kd.exe

windows7-x64

6

bwlock_v20...kd.exe

windows10-2004-x64

6

bwlock_v201/LPK.dll

windows7-x64

3

bwlock_v201/LPK.dll

windows10-2004-x64

3

bwlock_v20...on.exe

windows7-x64

3

bwlock_v20...on.exe

windows10-2004-x64

3

bwlock_v20...za.exe

windows7-x64

5

bwlock_v20...za.exe

windows10-2004-x64

5

bwlock_v20...01.exe

windows7-x64

3

bwlock_v20...01.exe

windows10-2004-x64

3

bwlock_v20...02.exe

windows7-x64

3

bwlock_v20...02.exe

windows10-2004-x64

3

bwlock_v20...nt.bat

windows7-x64

5

bwlock_v20...nt.bat

windows10-2004-x64

5

bwlock_v20...��.url

windows7-x64

1

bwlock_v20...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4369ba99a8c0e8c162ba6d9da5d81705_JaffaCakes118

  • Size

    1.1MB

  • MD5

    4369ba99a8c0e8c162ba6d9da5d81705

  • SHA1

    e60fefb507cd2a2d51cdb01dcb0c5799e2f35d03

  • SHA256

    2b5cd425708d30ee12f066809bc68da16d4b10add76230c9943791a20c5c876f

  • SHA512

    67b6e27701467f5d1b9b2a25b37954be6a81cad0e30e7e77b198081d042191fa5e2673094b086ada1223b58935d0b8ce37d31b50a3c500fa01c310a62e000124

  • SSDEEP

    24576:udDRpk2sBj8k3UcFeM2V9hK5ssYyLGSSyNE6AastOmkFrMniKvN2Q3iKPi7M:cdpkOk3UcFeMm3K5ssu+LzsMBrMiKl20

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 4369ba99a8c0e8c162ba6d9da5d81705_JaffaCakes118
    .rar
  • bwlock_v201/!)设JZ5U为首页!.reg
  • bwlock_v201/)!访问我们的网站！.url
    .url
  • bwlock_v201/BwLock.chm
    .chm
  • bwlock_v201/BwLockd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bwlock_v201/LPK.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bwlock_v201/license.dat
  • bwlock_v201/make/7zCon.sfx
    .exe windows:4 windows x86 arch:x86

    fcdeed561b3f391fb24372fcfaa91375


    Headers

    Imports

    Sections

  • bwlock_v201/make/7za.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bwlock_v201/make/agent01.pak
    .exe windows:4 windows x86 arch:x86

    fcdeed561b3f391fb24372fcfaa91375


    Headers

    Imports

    Sections

  • bwlock_v201/make/agent02.pak
    .exe windows:4 windows x86 arch:x86

    fcdeed561b3f391fb24372fcfaa91375


    Headers

    Imports

    Sections

  • bwlock_v201/make/make_agent.bat
  • bwlock_v201/使用说明.txt
  • bwlock_v201/初始口令为空.txt
  • bwlock_v201/说明.url