Overview

overview

5

Static

static

3

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

明灯QQ�...�).exe

windows7-x64

5

明灯QQ�...�).exe

windows10-2004-x64

1

明灯QQ�...er.dll

windows7-x64

1

明灯QQ�...er.dll

windows10-2004-x64

1

明灯QQ�...��.exe

windows7-x64

5

明灯QQ�...��.exe

windows10-2004-x64

1

明灯QQ�...��.exe

windows7-x64

5

明灯QQ�...��.exe

windows10-2004-x64

1

明灯QQ�...ni.exe

windows7-x64

5

明灯QQ�...ni.exe

windows10-2004-x64

5

明灯QQ�...ch.exe

windows7-x64

1

明灯QQ�...ch.exe

windows10-2004-x64

1

明灯QQ�...se.exe

windows7-x64

5

明灯QQ�...se.exe

windows10-2004-x64

1

极速软�...��.url

windows7-x64

1

极速软�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c385667af93b26496fc05318171c857_JaffaCakes118

  • Size

    6.7MB

  • MD5

    8c385667af93b26496fc05318171c857

  • SHA1

    f4aa747a5ed46412a73781627dcf502ee37483b5

  • SHA256

    cf24b4539495dee965f9bc34e3e30189eec898259afd9041af46fe2b51dc2e69

  • SHA512

    ab47f0d166b6e0282e4408227c19c6dd8448f01e6148a83a57c987932cf4c32c72cc0647c9d73cf4cc5f18782588c8914a7a2f2792c06a36340c68931e55a573

  • SSDEEP

    196608:NyyYvnEIyHp8clKeTFnHarUA2jfFc34zGE7Cn7n4po:NyyYPx9cjVHaWRcIS+CsO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c385667af93b26496fc05318171c857_JaffaCakes118
    .rar
  • 使用说明.url
  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/1-明灯QQ日志评论2013先知版/(加强版)明灯QQ日志评论2013先知版_se.exe
    .exe windows:5 windows x86 arch:x86

    d467480bb96d4147b1b69ff3b766905b


    Headers

    Imports

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/1-明灯QQ日志评论2013先知版/Text.dat
  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/1-明灯QQ日志评论2013先知版/TextTY.dat
  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/1-明灯QQ日志评论2013先知版/UUWiseHelper.dll
    .dll windows:5 windows x86 arch:x86

    6365176b95d0f97c658083b9efe6b818


    Headers

    Imports

    Exports

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/1-明灯QQ日志评论2013先知版/教程.txt
  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/4-明灯QQ空间日志精准采集专业版/QQ空间日志精准采集专业版_se.exe
    .exe windows:5 windows x86 arch:x86

    7d0ea04c4d5bbfd59aed480262055bdc


    Headers

    Imports

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/8-明灯QQ空间留言群发2013先知版/明灯QQ空间留言群发2013先知版_se.exe
    .exe windows:5 windows x86 arch:x86

    f695aaa211baa23f4bf6ddfa313f7669


    Headers

    Imports

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/BySxani.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/TestPatch.ex~
    .exe windows:4 windows x86 arch:x86

    4785c141b0043d43bca986750db51098


    Headers

    Imports

    Sections

  • 明灯QQ空间日志精准采集专业版_Jisuxz.com/明灯陌生人QQ采集专家/明灯陌生人QQ采集专家_se.exe
    .exe windows:5 windows x86 arch:x86

    d009d0a8dbc99571432d19b369b2e883


    Headers

    Imports

    Sections

  • 极速软件下载.url