Overview

overview

7

Static

static

7

FMY.dll

windows7-x64

1

FMY.dll

windows10-2004-x64

1

SkinBag.dll

windows7-x64

1

SkinBag.dll

windows10-2004-x64

1

Update.exe

windows7-x64

1

Update.exe

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

笨笨家�...��.exe

windows7-x64

7

笨笨家�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    00604f65cef4b38c29dda3b4e8be532c_JaffaCakes118

  • Size

    1.8MB

  • MD5

    00604f65cef4b38c29dda3b4e8be532c

  • SHA1

    ad9b914fb0deee74ed88a630846bb270dc43be03

  • SHA256

    4e6947169571606b3b9a80b12d2a576f5f994c75096a48083767479218c56fcc

  • SHA512

    5f60ba4963e129ca9eaf7341787fb4567c69e21e39be97a7d021152baf2ff5a92979594a3ddb0d706bb7198d070a9f3e4c003bab4ea7a39d8cd7b769439417eb

  • SSDEEP

    49152:tQAmAqgjS3J9rFo2wHKmPRkVkA6dFhzXpnuUrVV:tphqPZ9po2wHSkBdFJXpnuYV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 00604f65cef4b38c29dda3b4e8be532c_JaffaCakes118
    .rar
  • FMY.dll
  • SkinBag.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url
  • 笨笨家庭记账本.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 解压后再使用.txt