Overview

overview

5

Static

static

3

K3_RISE_V1....2.exe

windows7-x64

5

K3_RISE_V1....2.exe

windows10-2004-x64

5

K3_RISE_V1...�!.exe

windows7-x64

1

K3_RISE_V1...�!.exe

windows10-2004-x64

1

K3_RISE_V1...gr.dll

windows7-x64

1

K3_RISE_V1...gr.dll

windows10-2004-x64

1

K3_RISE_V1...in.exe

windows7-x64

1

K3_RISE_V1...in.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f04639158966ec4c68757442f770d23_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0f04639158966ec4c68757442f770d23

  • SHA1

    179977c41c1cb2f74792d2a148dbce1c64bb7e1c

  • SHA256

    54019b92f51554c750f85be8d5c89989d10b83d8bf6e8bec24462655f40e4d2d

  • SHA512

    1cc47ed7cd3bc6965eabcda491a7400693e111fee2f69bebd7b26d12892c9f6eca13e68158f341050a1b26a8edc553e025d80e4a1e7b75e75cb3fe120a273478

  • SSDEEP

    49152:ZG1loF/XMYv2RbOSKdmOdsGrco3bSPtNXoMzFvzzhQBAJ:OlMfMtOHdyGVOPQSFvxr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f04639158966ec4c68757442f770d23_JaffaCakes118
    .rar
  • K3_RISE_V12.3_KEYGEN/R123KeyGen(VIP)V1.2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • K3_RISE_V12.3_KEYGEN/使用说明.txt
  • K3_RISE_V12.3_KEYGEN/先运行我!.exe
    .exe windows:4 windows x86 arch:x86

    3d3d967282b1619854edf6348ebd96b7


    Headers

    Imports

    Sections

  • K3_RISE_V12.3_KEYGEN/替换文件/KdSvrmgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6b73ddaf64a3f6fd535b8e5ba0a92bc7


    Headers

    Imports

    Exports

    Sections

  • K3_RISE_V12.3_KEYGEN/替换文件/kdmain.exe
    .exe windows:4 windows x86 arch:x86

    73eb1595ee87a2e305db3ec5f946eb72


    Headers

    Imports

    Sections