Overview

overview

9

Static

static

7

hazgyese/�...��.url

windows7-x64

1

hazgyese/�...��.url

windows10-2004-x64

1

hazgyese/�...EL.dll

windows7-x64

7

hazgyese/�...EL.dll

windows10-2004-x64

7

hazgyese/�...ad.dll

windows7-x64

1

hazgyese/�...ad.dll

windows10-2004-x64

1

hazgyese/�...ie.dll

windows7-x64

1

hazgyese/�...ie.dll

windows10-2004-x64

1

hazgyese/�...p1.dll

windows7-x64

3

hazgyese/�...p1.dll

windows10-2004-x64

3

hazgyese/�...PI.dll

windows7-x64

1

hazgyese/�...PI.dll

windows10-2004-x64

1

hazgyese/�...on.exe

windows7-x64

5

hazgyese/�...on.exe

windows10-2004-x64

1

hazgyese/�...et.dll

windows7-x64

1

hazgyese/�...et.dll

windows10-2004-x64

1

hazgyese/�...ln.dll

windows7-x64

1

hazgyese/�...ln.dll

windows10-2004-x64

1

hazgyese/�...oe.dll

windows7-x64

1

hazgyese/�...oe.dll

windows10-2004-x64

1

hazgyese/�...ll.dll

windows7-x64

1

hazgyese/�...ll.dll

windows10-2004-x64

1

hazgyese/�...ir.dll

windows7-x64

1

hazgyese/�...ir.dll

windows10-2004-x64

1

hazgyese/�...��.exe

windows7-x64

9

hazgyese/�...��.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2891efd22c6c39f84a33635087ede44e_JaffaCakes118

  • Size

    6.4MB

  • MD5

    2891efd22c6c39f84a33635087ede44e

  • SHA1

    23cfb8eb082baa73ecd0115ad2e6670bb32dd884

  • SHA256

    8418633507549aa7f6afc255426de051190af3d4c490b3bdb802f3a72ccd23f4

  • SHA512

    24b09e7767dea9091ca21f1f8b7ac3aff918df0b34a25fd3bb32b35c38d75b4ff7b0a36a53c8f657a55ede54e3a5f6494f71e019654c8b8da1333868be2364b4

  • SSDEEP

    196608:nOxlTaO2gg7HAiGkK+pZp9Izh6r6vKxylUR3/GSK:UmzxK+p216rAKcWR3eSK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 2891efd22c6c39f84a33635087ede44e_JaffaCakes118
    .rar
  • hazgyese/下载银行-提供免费绿色软件下载.url
    .url
  • hazgyese/下载银行.txt
  • hazgyese/黑暗之光夜涩辅助V3.8.0/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/arie.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/edison.fnr
    .exe windows:5 windows x86 arch:x86

    03b57558f537e4c6a38405071059a673


    Headers

    Imports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/poe.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/Ubad/zeir.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • hazgyese/黑暗之光夜涩辅助V3.8.0/报毒如何处理.txt
  • hazgyese/黑暗之光夜涩辅助V3.8.0/辅助使用说明.txt
  • hazgyese/黑暗之光夜涩辅助V3.8.0/黑暗之光夜涩辅助.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections