Overview

overview

7

Static

static

7

gyddosylcs...gy.exe

windows7-x64

7

gyddosylcs...gy.exe

windows10-2004-x64

7

gyddosylcs...ct.dll

windows7-x64

1

gyddosylcs...ct.dll

windows10-2004-x64

1

gyddosylcs...rl.dll

windows7-x64

1

gyddosylcs...rl.dll

windows10-2004-x64

3

gyddosylcs...le.exe

windows7-x64

1

gyddosylcs...le.exe

windows10-2004-x64

1

gyddosylcs...me.exe

windows7-x64

1

gyddosylcs...me.exe

windows10-2004-x64

1

gyddosylcs...ck.dll

windows7-x64

1

gyddosylcs...ck.dll

windows10-2004-x64

1

gyddosylcs...nH.dll

windows7-x64

7

gyddosylcs...nH.dll

windows10-2004-x64

7

gyddosylcs...��.exe

windows7-x64

7

gyddosylcs...��.exe

windows10-2004-x64

7

gyddosylcs...��.url

windows7-x64

1

gyddosylcs...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64ddbb9f84a7ec9e6fd18389e27f5fc7_JaffaCakes118

  • Size

    1.6MB

  • MD5

    64ddbb9f84a7ec9e6fd18389e27f5fc7

  • SHA1

    64af6aa18b3ac881447a7d226a597921b74059e2

  • SHA256

    bf2939bf0db752c8efcd56e74602440aec6c0bd28dd7c4000924bb6f1b7c147d

  • SHA512

    bcfdea292743f0c4b11ec402c2aa7c779826c3362aff2a5558d3ab604f685ac350c0554c323a432c466c1d5fef720fb3ab463c8169a468b84fea4fb61b637de1

  • SSDEEP

    49152:DzC+RAPo8sw9sNIj9RT4NvSbNPQYc8Y8TBHq:DzCgmo8zFrENabqYRVTBK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 64ddbb9f84a7ec9e6fd18389e27f5fc7_JaffaCakes118
    .zip
  • gyddosylcs_gr/Cache/gy.dat
    .exe windows:4 windows x86 arch:x86

    86dd9fff59a7c62152b04ae49712d681


    Headers

    Imports

    Sections

  • gyddosylcs_gr/Plug/Infect.addon
    .dll windows:4 windows x86 arch:x86

    e23b2990e58346a0a026310d32a82b0a


    Headers

    Imports

    Exports

    Sections

  • gyddosylcs_gr/Plug/PlusCtrl.dll
    .dll windows:4 windows x86 arch:x86

    58d55af8102a3f0415f12e07d2d6ebca


    Headers

    Imports

    Exports

    Sections

  • gyddosylcs_gr/Plug/PlusFile.exe
    .exe windows:4 windows x86 arch:x86

    1ccec554fd1a72713ba11e1e0e0bff40


    Headers

    Imports

    Sections

  • gyddosylcs_gr/Plug/PlusFrame.exe
    .exe windows:4 windows x86 arch:x86

    1b35bd64c4fefcd43b010b543afb4a16


    Headers

    Imports

    Sections

  • gyddosylcs_gr/Plug/PlusSock.dll
    .dll windows:4 windows x86 arch:x86

    e7d9a1619c65375222c1216cb3af06a6


    Headers

    Imports

    Exports

    Sections

  • gyddosylcs_gr/SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • gyddosylcs_gr/东坡下载说明.txt
  • gyddosylcs_gr/客户端.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gyddosylcs_gr/更多软件下载.url
  • gyddosylcs_gr/更新说明.txt