General

  • Target

    b84ea3e85491b28531e36a6878438300_JaffaCakes118

  • Size

    1.9MB

  • MD5

    b84ea3e85491b28531e36a6878438300

  • SHA1

    21016fa9a442fd7eee0b53189a760da837780942

  • SHA256

    491248d99a930b73c2c298c5f374c2e760f07552f1e5456c39795b5e93271a8e

  • SHA512

    c5f065faf5896b78c2736c3c7265d4f7bd9b45203744a968c9b005c0271826df1382c52c718f9f514ecaf63fa99a0a5fa7d3ceacd8d62eec3e0a5f057e3a65fa

  • SSDEEP

    49152:dBkHxApoV7YlOJiTtd307zub9Y22a3DNsMxrv:dSHipkTJiPjCa3hsMV

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • b84ea3e85491b28531e36a6878438300_JaffaCakes118
    .rar
  • 射雕zero辅助 1.0绿色版/GameMap.dll
    .dll windows:4 windows x86 arch:x86

    bd29b34101c15452920959a4bad96821


    Headers

    Imports

    Exports

    Sections

  • 射雕zero辅助 1.0绿色版/GameUI.dll
    .dll windows:4 windows x86 arch:x86

    cf84f9a065b2617375eb5ee9a824681f


    Headers

    Imports

    Exports

    Sections

  • 射雕zero辅助 1.0绿色版/Gfx2D.dll
    .dll windows:4 windows x86 arch:x86

    1254094c21a705b49d329be081da5cfa


    Headers

    Imports

    Exports

    Sections

  • 射雕zero辅助 1.0绿色版/ZipLib.dll
    .dll windows:5 windows x86 arch:x86

    3a66351d63cefec54e84e7d49764aa2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 射雕zero辅助 1.0绿色版/fmodex.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 射雕zero辅助 1.0绿色版/使用说明.txt
  • 射雕zero辅助 1.0绿色版/射雕ZERO外挂.exe
    .exe windows:4 windows x86 arch:x86

    d97de319afabffaff3e176e3b287b3e3


    Headers

    Imports

    Sections

  • 射雕zero辅助 1.0绿色版/绿软基地.url
    .url