General

  • Target

    b2e35c9d29c160b8e41618d7cdc4108b_JaffaCakes118

  • Size

    1.7MB

  • MD5

    b2e35c9d29c160b8e41618d7cdc4108b

  • SHA1

    ffb62b0e6cea48d1ce8731099a4456ba1853c72b

  • SHA256

    f9ef80bcbf790d8bc1966d7b13a1b08eb87030aca2de68166b90a8318cc9aad8

  • SHA512

    21ded91633aa3d56e40b9aa5d1b0ad88ace30a47e96783d7eb177658f3b322ded59fbf1efadcdd1a5db5a2ceb96b93cb17f65785db0d5a1459e037921f213184

  • SSDEEP

    49152:xB+s+kWpfEJiHHy93ZJSkyzhXmMMQb7sH3k:xUEJiHHynSxRb7Yk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • b2e35c9d29c160b8e41618d7cdc4108b_JaffaCakes118
    .rar
  • 雨落自动收货V1.3/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    7da7bb12497bd01841f214157430bcd9


    Code Sign

    Headers

    Imports

    Sections

  • 雨落自动收货V1.3/plugin/FILE.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/MSG.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    57aad26ca686d6b6792d67b488197bb4


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/MSG.ini
  • 雨落自动收货V1.3/plugin/PIC.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9d837035acaae8b82110cf620a038f18


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/REGDLL.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f076a1e4fbab4d2c4bccbdc4ea8a1b72


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/SYS.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8942c3e9159ff5e44b99b3b05f222dbe


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/SYS.ini
  • 雨落自动收货V1.3/plugin/WINDOW.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    373d5028e508c59db830ece76ed6fd99


    Headers

    Imports

    Exports

    Sections

  • 雨落自动收货V1.3/plugin/WINDOW.ini
  • 雨落自动收货V1.3/uservar.ini
  • 雨落自动收货V1.3/添加物品方法.txt
  • 雨落自动收货V1.3/自动收货V1.1.ini
  • 雨落自动收货V1.3/自动收货V1.2.ini
  • 雨落自动收货V1.3/自动收货V1.3.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • 雨落自动收货V1.3/自动收货V1.3.ini