Overview

overview

7

Static

static

7

xgj2.0.2.2/Admin.dll

windows7-x64

1

xgj2.0.2.2/Admin.dll

windows10-2004-x64

1

xgj2.0.2.2...Xu.dll

windows7-x64

1

xgj2.0.2.2...Xu.dll

windows10-2004-x64

3

xgj2.0.2.2...EL.dll

windows7-x64

7

xgj2.0.2.2...EL.dll

windows10-2004-x64

7

xgj2.0.2.2/XGJ.dll

windows7-x64

1

xgj2.0.2.2/XGJ.dll

windows10-2004-x64

1

xgj2.0.2.2/up.dll

windows7-x64

3

xgj2.0.2.2/up.dll

windows10-2004-x64

3

xgj2.0.2.2...��.exe

windows7-x64

3

xgj2.0.2.2...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    285b6104454fc266dfd11e4347908fac_JaffaCakes118

  • Size

    1.6MB

  • MD5

    285b6104454fc266dfd11e4347908fac

  • SHA1

    ae5150257f0ae8d7d2cd7d9e202cae22bdf5e906

  • SHA256

    d71bf554c8c4f7807a45af0b79fc213f93f209cd6510ac212c94e50720eb9610

  • SHA512

    228ccf1bd24f2e2de8c1ec9737da7ee8034ed0d4898d62fd09b80d19396f5f47e9c80a698baa60d6027f1680cf397cbbed17f3ba7605c03b305e105c9b62e493

  • SSDEEP

    49152:nsGkvkftIJQ1LnOH4jASp0o0DnKhxyA3aw9zjQYpSuexpCfv:nxskftVy8ASyooKOMamgYpSuexpCX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 285b6104454fc266dfd11e4347908fac_JaffaCakes118
    .rar
  • xgj2.0.2.2/Admin.dll
    .dll windows:4 windows x86 arch:x86

    920581d0cced268adcabd5b80d52b046


    Headers

    Imports

    Sections

  • xgj2.0.2.2/DuoChengXu.dll
    .dll windows:4 windows x86 arch:x86

    c33ac8b800790e08017c78fb8a6027dd


    Headers

    Imports

    Sections

  • xgj2.0.2.2/Images/DuoChengXu.jpg
    .jpg
  • xgj2.0.2.2/Images/about.jpg
    .jpg
  • xgj2.0.2.2/Images/movie.gif
    .gif
  • xgj2.0.2.2/Images/qd.jpg
    .jpg
  • xgj2.0.2.2/Images/暂无图片.gif
    .gif
  • xgj2.0.2.2/Images/节日图片.JPG
    .jpg
  • xgj2.0.2.2/README.TXT
  • xgj2.0.2.2/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • xgj2.0.2.2/XGJ.dll
    .dll windows:4 windows x86 arch:x86

    48381bc7dbd2e4ad1aee020093272f43


    Headers

    Imports

    Exports

    Sections

  • xgj2.0.2.2/data/XLT.LT
  • xgj2.0.2.2/data/XLTDZ.DAT
  • xgj2.0.2.2/data/main.mdb
  • xgj2.0.2.2/data/sys.dat
  • xgj2.0.2.2/skinh.she
  • xgj2.0.2.2/up.dll
    .dll windows:4 windows x86 arch:x86

    4d59b1813d5935190a2091ff086174ab


    Headers

    Imports

    Exports

    Sections

  • xgj2.0.2.2/网游小管家.exe
    .exe windows:4 windows x86 arch:x86

    3d60e166747a046516256a5d790addd7


    Headers

    Imports

    Sections