Overview

overview

6

Static

static

3

version2.5...nt.exe

windows7-x64

6

version2.5...nt.exe

windows10-2004-x64

6

version2.5...ks.dll

windows7-x64

1

version2.5...ks.dll

windows10-2004-x64

1

version2.5...ct.exe

windows7-x64

3

version2.5...ct.exe

windows10-2004-x64

3

version2.5...ew.dll

windows7-x64

1

version2.5...ew.dll

windows10-2004-x64

1

version2.5...nt.dll

windows7-x64

1

version2.5...nt.dll

windows10-2004-x64

1

version2.5...nt.dll

windows7-x64

1

version2.5...nt.dll

windows10-2004-x64

1

version2.5...��.url

windows7-x64

1

version2.5...��.url

windows10-2004-x64

1

version2.5...er.exe

windows7-x64

1

version2.5...er.exe

windows10-2004-x64

1

version2.5...ew.dll

windows7-x64

1

version2.5...ew.dll

windows10-2004-x64

1

version2.5...er.dll

windows7-x64

1

version2.5...er.dll

windows10-2004-x64

1

version2.5...ew.exe

windows7-x64

1

version2.5...ew.exe

windows10-2004-x64

1

version2.5...nt.dll

windows7-x64

1

version2.5...nt.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e907f5e47bdbb8af7f98621e0cf148b6_JaffaCakes118

  • Size

    612KB

  • MD5

    e907f5e47bdbb8af7f98621e0cf148b6

  • SHA1

    3482299b5918b552e9a7ae3b3e75aa970dc3ba6b

  • SHA256

    b79af57c2562c975b6b8faea1d786093625828aa436d1cb15dd16581f7d16577

  • SHA512

    f65ae5611c95f0a25a172d5120429f17be833b37b707b532b4a67cd1466253b855c676e83fc7dea563323a1f6c3069e8573be51273680b5cfb470033c4057d41

  • SSDEEP

    12288:AnEEHdy2zEvJIMKpFSI0QNBz7hRYI8B2z3llXbJfdBOuX0:AnEsclJApcQnzlx/TJlB9X0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • e907f5e47bdbb8af7f98621e0cf148b6_JaffaCakes118
    .rar
  • version2.51/客户端/KVNCClient.exe
    .exe windows:4 windows x86 arch:x86

    a7a462428ddd4f261a7e235f0a5115ec


    Headers

    Imports

    Sections

  • version2.51/客户端/KVNCClient.ini
  • version2.51/客户端/KVNCHooks.dll
    .dll windows:4 windows x86 arch:x86

    4d199a8b664d54d9b606a5f6114e777b


    Headers

    Imports

    Exports

    Sections

  • version2.51/客户端/KVNCProtect.exe
    .exe windows:4 windows x86 arch:x86

    01df25d7771f896860cccaefbff02a91


    Headers

    Imports

    Sections

  • version2.51/客户端/KVNCView.dll
    .dll windows:4 windows x86 arch:x86

    60509688c4f27f81c1082cc1be3c9631


    Headers

    Imports

    Exports

    Sections

  • version2.51/客户端/KVNClient.dll
    .dll windows:4 windows x86 arch:x86

    67b8a44c9aa490ff895283ffdf9fe6cf


    Headers

    Imports

    Exports

    Sections

  • version2.51/客户端/Readme.txt
  • version2.51/客户端/TcpClient.dll
    .dll windows:4 windows x86 arch:x86

    24c3cc6af7ab2d4f5d8a97db0ad49c6d


    Headers

    Imports

    Exports

    Sections

  • version2.51/新云软件.url
    .url
  • version2.51/服务器/KVNCServer.exe
    .exe windows:4 windows x86 arch:x86

    39c7f411b442be4df57a95fed35c93d5


    Headers

    Imports

    Sections

  • version2.51/服务器/KVNCServer.ini
  • version2.51/服务器/KVNCView.dll
    .dll windows:4 windows x86 arch:x86

    60509688c4f27f81c1082cc1be3c9631


    Headers

    Imports

    Exports

    Sections

  • version2.51/服务器/Readme.txt
  • version2.51/服务器/TcpServer.dll
    .dll windows:4 windows x86 arch:x86

    630966e35f7ea6850fdec8ccc80db9e0


    Headers

    Imports

    Exports

    Sections

  • version2.51/版本更新记录.txt
  • version2.51/监控端/KVNCView.exe
    .exe windows:4 windows x86 arch:x86

    138f26345aa8ccfb6c810b2ef94304eb


    Headers

    Imports

    Sections

  • version2.51/监控端/KVNCView.ini
  • version2.51/监控端/Readme.txt
  • version2.51/监控端/Skin/ApplicationMain.ico
  • version2.51/监控端/Skin/Layout.ini
  • version2.51/监控端/Skin/MainWnd.bmp
  • version2.51/监控端/TcpClient.dll
    .dll windows:4 windows x86 arch:x86

    24c3cc6af7ab2d4f5d8a97db0ad49c6d


    Headers

    Imports

    Exports

    Sections

  • version2.51/配置说明.txt