Overview

overview

7

Static

static

7

EThread.dll

windows7-x64

1

EThread.dll

windows10-2004-x64

1

SkinH_EL.dll

windows7-x64

7

SkinH_EL.dll

windows10-2004-x64

7

iext.dll

windows7-x64

1

iext.dll

windows10-2004-x64

1

iext5.dll

windows7-x64

1

iext5.dll

windows10-2004-x64

1

krnln.dll

windows7-x64

1

krnln.dll

windows10-2004-x64

1

spec.dll

windows7-x64

1

spec.dll

windows10-2004-x64

1

冰魄QQ�...��.exe

windows7-x64

7

冰魄QQ�...��.exe

windows10-2004-x64

7

更多软�...��.url

windows7-x64

1

更多软�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ecd91d4b69524c51eceac721ab046ae_JaffaCakes118

  • Size

    1.7MB

  • MD5

    6ecd91d4b69524c51eceac721ab046ae

  • SHA1

    0576065749addd51867c8908800329c473c78828

  • SHA256

    60c2755673a2b029d7790e43db86183eb254335d7b49fdc1c56acf6f928a08bb

  • SHA512

    3e71c4a6fa5ec156119da62f696a8fd8da42977d7f1fe62665bef9eaea652aac13d70a43fe5a21482a41e67f908ef5972be627031d44efe5e617c5cc22a182bf

  • SSDEEP

    49152:ipKPhQEwYLddDO4SVxAqJkm0R8Wf+O7m27BS:iYzwEddDOxxAqqmlZOm2E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ecd91d4b69524c51eceac721ab046ae_JaffaCakes118
    .zip
  • EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • iext5.fne
    .dll windows:4 windows x86 arch:x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 东坡下载说明.txt
  • 冰魄QQ空间一键删除说说助手 『宿劫の曳影』 Sy Team旗下出品.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 更多软件下载.url