General

  • Target

    72dea01085866bffc7ca2fd17f90fba5_JaffaCakes118

  • Size

    3.2MB

  • MD5

    72dea01085866bffc7ca2fd17f90fba5

  • SHA1

    e301bf632ed948a35c56ecb745f915aba7a7f803

  • SHA256

    8964e8dbc103efc070ff984c060bced6fa1fee387aacb8ce570d9957638e8d33

  • SHA512

    73f7cc5f97d3d9a41b76742b9bd0829b549f64c18a22f975d96508ab9231d7f55d1b4ae1a2fd538eb3456a92e0e972799892708880e2e9dca12ad7fa88519e77

  • SSDEEP

    98304:aezqyr5YIa4MXRipqZE/bihl9gfGoJpQdIjf:aehO4MXRBubivhoQIjf

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 72dea01085866bffc7ca2fd17f90fba5_JaffaCakes118
    .rar
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/1.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/2.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/3.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/4.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/CrackCaptcha.log
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/greetings1.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/greetings2.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/greetings3.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/login.ini
  • kdazqqpljhyrj/kdazqqpljhyrj/collocation/test.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/jedata.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • kdazqqpljhyrj/kdazqqpljhyrj/★★★★★★使用前必看★★★★★★.txt
  • kdazqqpljhyrj/kdazqqpljhyrj/酷迪JAVAQQ协议加好友软件.exe
    .exe windows:4 windows x86 arch:x86

    ba6091fefa31d2fceebb27e20d6e5ed3


    Headers

    Imports

    Sections

  • kdazqqpljhyrj/kdazqqpljhyrj/飘荡软件.url
    .url