Overview

overview

3

Static

static

3

cf刷枪�...ne.exe

windows7-x64

1

cf刷枪�...ne.exe

windows10-2004-x64

1

cf刷枪�....0.exe

windows7-x64

3

cf刷枪�....0.exe

windows10-2004-x64

3

cf刷枪�...om.dll

windows7-x64

3

cf刷枪�...om.dll

windows10-2004-x64

3

cf刷枪�...cs.dll

windows7-x64

1

cf刷枪�...cs.dll

windows10-2004-x64

1

cf刷枪�...et.dll

windows7-x64

1

cf刷枪�...et.dll

windows10-2004-x64

1

cf刷枪�...ln.dll

windows7-x64

1

cf刷枪�...ln.dll

windows10-2004-x64

1

cf刷枪�...ce.dll

windows7-x64

1

cf刷枪�...ce.dll

windows10-2004-x64

3

cf刷枪�...ll.dll

windows7-x64

1

cf刷枪�...ll.dll

windows10-2004-x64

1

cf刷枪�...��.url

windows7-x64

1

cf刷枪�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d4852961b4b25d3d7559114b983e0f2_JaffaCakes118

  • Size

    1.5MB

  • MD5

    2d4852961b4b25d3d7559114b983e0f2

  • SHA1

    c44a213e87a8569f17fe7d888947f50be8c6c665

  • SHA256

    310bf2216467e5ef93ce19db4545565dbd98381803a347a01c01d4efd98b0a74

  • SHA512

    b9339ab316313dfeea2a974dc3f403afe9a6afb36bfe68e676d072d8828b66edc265fe1e3e4773c1ecc088d99c135e2898791c93d0deb7b26df0f586a63f7dd6

  • SSDEEP

    49152:Ia5lGgA9ZV8CNdfFS+M7788uMnIutAwyH:IajLA9ZV8CNZo+M7w8fI9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d4852961b4b25d3d7559114b983e0f2_JaffaCakes118
    .rar
  • cf刷枪软件无需激活2014/TLEngine.dll
    .exe windows:4 windows x86 arch:x86

    3d3d967282b1619854edf6348ebd96b7


    Headers

    Imports

    Sections

  • cf刷枪软件无需激活2014/VipReward.xml
    .xml
  • cf刷枪软件无需激活2014/VipServerGift.xml
    .xml
  • cf刷枪软件无需激活2014/cf刷枪软件永久雷神 V9.0.exe
    .exe windows:4 windows x86 arch:x86

    f2c6cd61e0fb38d7e0b0c890cee74b8a


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/config.ini
  • cf刷枪软件无需激活2014/cs.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    29b661a4c01bc09b11d02be5e19a9de0


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/jl.txt
  • cf刷枪软件无需激活2014/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/psvince.dll
    .dll windows:4 windows x86 arch:x86

    27a86aaa3e5842ff2ceac4363ef98a7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • cf刷枪软件无需激活2014/游戏大全.url
    .url
  • cf刷枪软件无需激活2014/游戏说明.txt