Overview

overview

7

Static

static

7

Bin/Cache/gy.exe

windows7-x64

1

Bin/Cache/gy.exe

windows10-2004-x64

1

Bin/Client.exe

windows7-x64

7

Bin/Client.exe

windows10-2004-x64

7

Bin/SkinH.dll

windows7-x64

7

Bin/SkinH.dll

windows10-2004-x64

7

Bin/当下...��.url

windows7-x64

1

Bin/当下...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74c2e2f3a997e5a10c8aa6f4df199d8c_JaffaCakes118

  • Size

    191KB

  • MD5

    74c2e2f3a997e5a10c8aa6f4df199d8c

  • SHA1

    8b4c17a61fc80289e7ddaef6c9c68c5636080503

  • SHA256

    a5ef08770a33e6a95948b8b285e44c608d12ac334fda79f486f6baa1d5508ffe

  • SHA512

    26003100acebefb250e4e51c0681cba288ff1a69cc30341ea6956b49f2af6bd1a97aaff561b7500b9a5c6efa6632e94f5c6cf8e63f74ffe0a7a1c38324b0a69e

  • SSDEEP

    3072:bA4GThCZC7R2GSTydQ5/Mri0Bk7d9BekLB3raFe/OL6hh15IFq2IZSJNMd5/ugvB:bpGTf7sbydA/MuUk1ektyeW2hhHv2Iw8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 74c2e2f3a997e5a10c8aa6f4df199d8c_JaffaCakes118
    .rar
  • Bin/Cache/gy.dat
    .exe windows:4 windows x86 arch:x86

    baba43eb94ddcada149cf94fdfb5c57c


    Headers

    Imports

    Sections

  • Bin/Client.exe
    .exe windows:4 windows x86 arch:x86

    0e7901f56ddd3ee23b056f1b9df68bc8


    Headers

    Imports

    Sections

  • Bin/Client.ini
  • Bin/SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Bin/使用说明.txt
  • Bin/当下软件园.url
    .url
  • Bin/皮肤文件.zip
    .zip
  • SkinH.she