General

  • Target

    JaffaCakes118_8a9ba2784e17e0ef6363945808bfe0b1

  • Size

    758KB

  • MD5

    8a9ba2784e17e0ef6363945808bfe0b1

  • SHA1

    a0abe2bb395685e7ca2cbbdab555712899078f9b

  • SHA256

    7b000cf48368f26c50813710d9444a76a1d048f430d067a9566739e4730a2e47

  • SHA512

    7dc59edbebe0b60d29d63ca40a65e0ab11b1b83115e95e36ae4b360c9bd006a750d729de6bc6fd4d75307a8d63c1faadf3a14d74927cb2ac471913ce40e3b68f

  • SSDEEP

    12288:IDWbiPPImI8QEbT9MzQ6NDmdANLeIgENeQLKCNbnuNu9K1L/5TD:U4maW4LodANLeIgYd/N6f1T1

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8a9ba2784e17e0ef6363945808bfe0b1
    .rar
  • 使用必读.url
  • 如果无法运行,请先安装.NET Framework.url
  • 最新版到ARP联盟搜索下载.url
  • 洛克王国菲菲辅助9.4无广告版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 绿色软件园.url