Overview

overview

10

Static

static

10

龙网百�...VC.dll

windows7-x64

10

龙网百�...VC.dll

windows10-2004-x64

7

龙网百�...er.dll

windows7-x64

1

龙网百�...er.dll

windows10-2004-x64

1

龙网百�...te.exe

windows7-x64

7

龙网百�...te.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    40a8168ee494f224af042d3fe6165cc0_JaffaCakes118

  • Size

    1.9MB

  • MD5

    40a8168ee494f224af042d3fe6165cc0

  • SHA1

    e8dd8806bce7385230e7d0a3db593106b4b9f47f

  • SHA256

    51d1070af54047bc6848b0517e2bfc2bc026833e569a5dd578994b6df2095cc2

  • SHA512

    6bc3b76e3de98054a8490d07e8a643b953e0f78fe0b48aa6589a0df66758494fd9c3e26496e19b95015e0cac7197f026d02a264ac7e92db4bd67aeda0c296b66

  • SSDEEP

    49152:ZKOvIA1cz7rEZd2ln2Egn0C7xSltNJwK3+a3zTpoUqW/jkpe7uzZCfiCO:UprQe2sCslvOK3LnMWvutCah

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 40a8168ee494f224af042d3fe6165cc0_JaffaCakes118
    .rar
  • 龙网百度私信群发机/AntiVC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 龙网百度私信群发机/UUWiseHelper.dll
    .dll windows:5 windows x86 arch:x86

    e0e9f277ce989ebccdd368f3ac3dd37c


    Headers

    Imports

    Exports

    Sections

  • 龙网百度私信群发机/baidu.mdb
  • 龙网百度私信群发机/update.exe
    .exe windows:4 windows x86 arch:x86

    ae5028d766d4ba06f45faa4851a9e049


    Headers

    Imports

    Sections

  • 龙网百度私信群发机/保存配置.ini
  • 龙网百度私信群发机/保存配置/关键词.txt
  • 龙网百度私信群发机/保存配置/替换关键词.txt
  • 龙网百度私信群发机/注册配置.ini