Overview

overview

3

Static

static

3

fangtangyi...��.htm

windows7-x64

1

fangtangyi...��.htm

windows10-2004-x64

1

fangtangyi...�).url

windows7-x64

1

fangtangyi...�).url

windows10-2004-x64

1

fangtangyi...��.exe

windows7-x64

3

fangtangyi...��.exe

windows10-2004-x64

3

$PLUGINSDI...68.exe

windows7-x64

1

$PLUGINSDI...68.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e4e3622549120e3bf3669cd4cc30859_JaffaCakes118

  • Size

    450KB

  • MD5

    5e4e3622549120e3bf3669cd4cc30859

  • SHA1

    48984f3c0fff037c6b21192a4075e09238ef21e4

  • SHA256

    7859edb18c6c4f6dadeac8123a349e97387433dae961b4dd717f203b6134938d

  • SHA512

    70979d4af0093ad6f6f2d25e165d02c91fcd774d5b60a9012bae76210b0b90560bfd2fd71bbd4b9a88601bc0a3a5fc5a1d08a3b358dda561979cab427aac5ffa

  • SSDEEP

    12288:/FZFKtnNGPQBetpZvxGBz+hXIC2wUIae5BPfgaXZY:/FZQxMtpxUthyfrJY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e4e3622549120e3bf3669cd4cc30859_JaffaCakes118
    .rar
  • fangtangyinkongocc/下载说明.htm
    .html
  • fangtangyinkongocc/使用帮助(河东软件园).url
    .url
  • fangtangyinkongocc/使用说明.txt
  • fangtangyinkongocc/方塘音控.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/kylin68.exe
    .exe windows:4 windows x86 arch:x86

    c85e49f51a4269c1477c44ceecce4a68


    Headers

    Imports

    Sections