Overview

overview

3

Static

static

3

config/新...��.url

windows7-x64

1

config/新...��.url

windows10-2004-x64

1

info/jupiter.htm

windows7-x64

1

info/jupiter.htm

windows10-2004-x64

1

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

mchset.dll

windows7-x64

1

mchset.dll

windows10-2004-x64

3

pcre.dll

windows7-x64

3

pcre.dll

windows10-2004-x64

3

temp/EWH32.dll

windows7-x64

1

temp/EWH32.dll

windows10-2004-x64

1

temp/EWH32.dll

windows7-x64

1

temp/EWH32.dll

windows10-2004-x64

1

temp/pddom.dll

windows7-x64

1

temp/pddom.dll

windows10-2004-x64

1

temp/pddom.dll

windows7-x64

1

temp/pddom.dll

windows10-2004-x64

1

藏头诗�...��.exe

windows7-x64

1

藏头诗�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e92ceb10c0fdd9c2d254c3515b49589d_JaffaCakes118

  • Size

    5.3MB

  • MD5

    e92ceb10c0fdd9c2d254c3515b49589d

  • SHA1

    213e53d4703d1d882208d1d1b54832aeff246d52

  • SHA256

    47e72a53fc8094c4beb09acd8768b3f307d98c944313ea90622d90a09efc92f1

  • SHA512

    67ed725be8c6e9258725f0337a6ca22d3f6c431b6a0cf24eca29ed445dc87413f972f06e34a359ba86892f862dc52208a5d203eb1cafc9077d2628ea5d19dbc9

  • SSDEEP

    98304:MW2coE3GIbEiVAM3Rji5Nt2B4Xok8+IszIqUP6rAhndnyprWACoCOSz3CY4:D2cf3Yix0ok/0XP6rAh6WACokzf4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • e92ceb10c0fdd9c2d254c3515b49589d_JaffaCakes118
    .rar
  • config/emfriends.met
  • config/ipfilter.dat
  • config/key_index.dat
  • config/known2_64.met
  • config/load_index.dat
  • config/nodes.dat
  • config/qts-wq.dat
  • config/新云软件.url
    .url
  • info/jupiter.htm
  • info/safelist.dat
  • info/satiter.dat
  • info/shareddir.dat
  • info/staticservers.dat
  • info/webservices.dat
  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    75e4a91d721ddc0f2a64314ac46cea9e


    Headers

    Imports

    Exports

    Sections

  • mchset.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pcre.dll
    .dll windows:4 windows x86 arch:x86

    8ab23956411019860d27a62efef310fc


    Headers

    Imports

    Exports

    Sections

  • temp/EWH32.CHS
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • temp/EWH32.CHT
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • temp/pddom.CHS
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • temp/pddom.CHT
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 藏头诗生成器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections