Overview

overview

3

Static

static

3

挂机锁�...TL.dll

windows7-x64

1

挂机锁�...TL.dll

windows10-2004-x64

1

挂机锁�...RD.dll

windows7-x64

1

挂机锁�...RD.dll

windows10-2004-x64

1

挂机锁�...gj.exe

windows7-x64

1

挂机锁�...gj.exe

windows10-2004-x64

1

挂机锁�...��.exe

windows7-x64

3

挂机锁�...��.exe

windows10-2004-x64

1

挂机锁�...��.url

windows7-x64

1

挂机锁�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    faa8461038f22a55088cc7372b6c50d2_JaffaCakes118

  • Size

    721KB

  • MD5

    faa8461038f22a55088cc7372b6c50d2

  • SHA1

    080bfafba4c0fa64e2377abad99e43dacd4f734e

  • SHA256

    aff54f4a6cfd69e755aeb22ae9e22316a8e9c412b7e62ca5ddd91baf99daea23

  • SHA512

    6f3ce36f2ada1a57f41db4ae7eeab045036a222f6892594d79b4f6d1b6588cac5794eb2225eb12f40da264b557a4d03b9f7e8cfd6bf612c080dee4637e554ac7

  • SSDEEP

    12288:99H/UEoehv+/gJ/TKpUnC9r5CpKX045lkp7N2Sgoa9tB4oaRL1HYMfcqAeiWqNTW:9xUZeggFCZIkllyNYoanB5aRLf45WqNK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • faa8461038f22a55088cc7372b6c50d2_JaffaCakes118
    .rar
  • 挂机锁小钥匙v8.1/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 挂机锁小钥匙v8.1/MSFLXGRD.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e87e749ebc55d5130c2bb4db48b707d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 挂机锁小钥匙v8.1/dsgj.bat
    .exe windows:4 windows x86 arch:x86

    ec4de702a8f743945c029caf2bab1069


    Headers

    Imports

    Sections

  • 挂机锁小钥匙v8.1/挂机锁小钥匙.exe
    .exe windows:4 windows x86 arch:x86

    68575a5b5435e14acc8bfbd6bfedc45a


    Headers

    Imports

    Sections

  • 挂机锁小钥匙v8.1/新云软件.url
    .url
  • 软件介绍.txt