Overview

overview

7

Static

static

7

挂挂一族.url

windows7-x64

1

挂挂一族.url

windows10-2004-x64

1

阿玉CF�...2L.dll

windows7-x64

7

阿玉CF�...2L.dll

windows10-2004-x64

7

阿玉CF�...��.exe

windows7-x64

3

阿玉CF�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e6b9fcf56c4570d55f98b1a5e4fd970_JaffaCakes118

  • Size

    1.4MB

  • MD5

    5e6b9fcf56c4570d55f98b1a5e4fd970

  • SHA1

    e7e992183c8dadf12a8c44d77f7c8278d2a9685b

  • SHA256

    df5d68780d832923558ec289d801c9cda264a0f1dab8173d6252986235005783

  • SHA512

    70dd9817dc09b4d89524cfcd956f685bfb11a8d463c445bc7974ead26595b8017f50d456ecd821e23f12b4239337c409e1cab75c8a9411692ef2985ad1967990

  • SSDEEP

    24576:9e/XCJl1b/lExd4+t2JjdrTKHlTuIH6uZCxRSU4b6ENcfUgqEAw9nRUJ:9e/X+rbIwdrTK8Ia1Slb6ENc8/EAw9na

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e6b9fcf56c4570d55f98b1a5e4fd970_JaffaCakes118
    .rar
  • 挂挂一族.url
  • 阿玉CF辅助/(8C~QJ2@J27RQP~LX8WI~%D.jpg
    .jpg
  • 阿玉CF辅助/12L.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 阿玉CF辅助/CF阿玉辅助v1.9最新版.exe
    .exe windows:4 windows x86 arch:x86

    e8eb70959c9a2c51cb9cefc8c6bea068


    Headers

    Imports

    Sections