Overview

overview

7

Static

static

7

readme.url

windows7-x64

6

readme.url

windows10-2004-x64

3

下载王w...om.url

windows7-x64

1

下载王w...om.url

windows10-2004-x64

1

易语言�...EL.dll

windows7-x64

7

易语言�...EL.dll

windows10-2004-x64

7

易语言�...xt.dll

windows7-x64

1

易语言�...xt.dll

windows10-2004-x64

1

易语言�...t2.dll

windows7-x64

1

易语言�...t2.dll

windows10-2004-x64

1

易语言�...et.dll

windows7-x64

1

易语言�...et.dll

windows10-2004-x64

1

易语言�...ln.dll

windows7-x64

1

易语言�...ln.dll

windows10-2004-x64

1

易语言�...p3.dll

windows7-x64

1

易语言�...p3.dll

windows10-2004-x64

1

易语言�...ec.dll

windows7-x64

1

易语言�...ec.dll

windows10-2004-x64

1

易语言�....0.exe

windows7-x64

1

易语言�....0.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04d6e9370217e0b0015f24049cf6937e_JaffaCakes118

  • Size

    1.9MB

  • MD5

    04d6e9370217e0b0015f24049cf6937e

  • SHA1

    ade6cebe27ef984e0a7ae80b97d31255c7b6c22e

  • SHA256

    21422f8dffcd0e9191c7af77b416622382e4fd9a1fc38b96ab3e11494e8d9ceb

  • SHA512

    9d046887d08c63c257c4e55f934e3a58060f17f99f8169cc4ae32d9b475ef6f2653492f83dfbde06b95284328c9e759ee811839485df6bdcb66443a8bb9a0b43

  • SSDEEP

    49152:PQXhYt1vqD12do1/ury0GWQERmiCGrhivWWcAr+4i6e:4mIZ2u0GuRBrhOWWcA6P6e

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 04d6e9370217e0b0015f24049cf6937e_JaffaCakes118
    .zip
  • readme.url
    .url
  • 下载王www.xzking.com.url
    .url
  • 易语言邮箱客户端/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 易语言邮箱客户端/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/pop3.fne
    .dll windows:4 windows x86 arch:x86

    bb922e5eed5bfa2d53a32c42dbec0c71


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 易语言邮箱客户端/邮箱V1.0.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections