General

  • Target

    4bb8b78c71c4d4acaa90b51ad2a94ec9_JaffaCakes118

  • Size

    1.3MB

  • MD5

    4bb8b78c71c4d4acaa90b51ad2a94ec9

  • SHA1

    adb0850a82c2b8049b7939344ec60e8d1e30f5d3

  • SHA256

    338cfe0d9b06096b8a146e9956cd7bf8d306160789d0441d72d3a69e907b6c99

  • SHA512

    97652c13c8c1836915daa8add0d25dff595e195b2494377db0a516f19d2b3dba64ad0cb45fac92e01eb43dc41bcbcbae1f9efccc122f79be608bc30c433101ed

  • SSDEEP

    24576:bLvkK0RYmdVL609Ve21Ilddc6yfv5Aqrvx3EnQrUlbQsjF1tDNSYJ:bQK0bVRzQdXmprvx3EkUlU8BSYJ

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bb8b78c71c4d4acaa90b51ad2a94ec9_JaffaCakes118
    .rar
  • 4399生死狙击刷金币修改器/4399生死狙击刷金币修改器.exe
    .exe windows:4 windows x86 arch:x86

    ab5c6c5ba22a1fcd233f6e317ae0bdbb


    Headers

    Imports

    Sections

  • 4399生死狙击刷金币修改器/s_ju/asmls/Dir.dll
    .dll windows:4 windows x86 arch:x86

    c9f423990106792d73744f584215634e


    Code Sign

    Headers

    Imports

    Sections

  • 4399生死狙击刷金币修改器/s_ju/asmls/Dnz_30.dll
    .dll windows:4 windows x86 arch:x86

    a07e2b03025f6d400ea5f168e05474e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 4399生死狙击刷金币修改器/s_ju/asmls/need/Core.xml
  • 4399生死狙击刷金币修改器/s_ju/asmls/need/Fonts.xml
    .xml
  • 4399生死狙击刷金币修改器/s_ju/asmls/need/Layers.xml
    .xml
  • 4399生死狙击刷金币修改器/s_ju/asmls/need/Settings.xml
    .xml
  • 4399生死狙击刷金币修改器/s_ju/asmls/need/Skin.xml
  • 4399生死狙击刷金币修改器/s_ju/asmls/need/ssjj.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 4399生死狙击刷金币修改器/s_ju/down_01/Basement.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    09c0e2393463ee3e628559f2bcab9d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 4399生死狙击刷金币修改器/s_ju/down_01/VSMsgBox.layout
  • 4399生死狙击刷金币修改器/s_ju/down_01/VsHelper.layout
  • 4399生死狙击刷金币修改器/s_ju/down_01/VsKeyMap.layout
  • 4399生死狙击刷金币修改器/s_ju/tp/nizhan.jpg
    .jpg
  • 4399生死狙击刷金币修改器/s_ju/tp/smls.jpg
    .jpg
  • 4399生死狙击刷金币修改器/s_ju/tp/timg.jpg
    .jpg
  • 4399生死狙击刷金币修改器/s_ju/tp/timg2.jpg
    .jpg
  • 4399生死狙击刷金币修改器/s_ju/tp/timg3.jpg
    .jpg
  • 4399生死狙击刷金币修改器/s_ju/tp/timg4.jpg
    .jpg
  • 使用说明.url
  • 极速软件下载.url
    .url