Overview

overview

7

Static

static

3

client/borlndmm.dll

windows7-x64

1

client/borlndmm.dll

windows10-2004-x64

1

client/dat/zxy70.dll

windows7-x64

1

client/dat/zxy70.dll

windows10-2004-x64

1

client/dat/zxycom.exe

windows7-x64

1

client/dat/zxycom.exe

windows10-2004-x64

1

client/dat/zxysys.exe

windows7-x64

7

client/dat/zxysys.exe

windows10-2004-x64

7

client/jlqqclient.exe

windows7-x64

7

client/jlqqclient.exe

windows10-2004-x64

7

client/mydll.dll

windows7-x64

6

client/mydll.dll

windows10-2004-x64

6

client/qtintf70.dll

windows7-x64

1

client/qtintf70.dll

windows10-2004-x64

1

client/zxypu.dll

windows7-x64

1

client/zxypu.dll

windows10-2004-x64

3

client/zxysysproc.dll

windows7-x64

3

client/zxysysproc.dll

windows10-2004-x64

3

client/帮...��.rtf

windows7-x64

4

client/帮...��.rtf

windows10-2004-x64

1

server/borlndmm.dll

windows7-x64

1

server/borlndmm.dll

windows10-2004-x64

1

server/jlqqserver.exe

windows7-x64

6

server/jlqqserver.exe

windows10-2004-x64

6

server/mydll.dll

windows7-x64

6

server/mydll.dll

windows10-2004-x64

6

server/qtintf70.dll

windows7-x64

1

server/qtintf70.dll

windows10-2004-x64

1

server/zxypu.dll

windows7-x64

1

server/zxypu.dll

windows10-2004-x64

3

server/zxysysproc.dll

windows7-x64

3

server/zxysysproc.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    28e08edb4c107ca10ecee92f5cde2f01_JaffaCakes118

  • Size

    9.3MB

  • MD5

    28e08edb4c107ca10ecee92f5cde2f01

  • SHA1

    6200f304115214514a7f528cba2bcbf3b1ff5455

  • SHA256

    49cfe757c99eb4287a5f7b36aaf9131c49c1ee4cfc9db9b9dc6cf6552734ff9f

  • SHA512

    c24c060c8efff7c0882b15296f3a0a1475b6956f04f8d048f9f43234f3ace14a025ed4e96326962fddf0f24362e5dca52a65e4c310639e11e12e1bbece709a04

  • SSDEEP

    196608:i3Sm85SGa5K9+NoR8i+EV78Z3pL9v1SbH/zed8D5hp917BfFI4f9nNK:i3RuFQER8ZZL3geM5b917Bf641nNK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • 28e08edb4c107ca10ecee92f5cde2f01_JaffaCakes118
    .rar
  • client/borlndmm.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • client/dat/Thumbs.db
  • client/dat/bmpdx.jpg
    .jpg
  • client/dat/dzxcb.mdb
  • client/dat/dzxcb2.mdb
  • client/dat/person.bmp
  • client/dat/test.jpg
    .jpg
  • client/dat/zxy70.dll
    .dll windows:4 windows x86 arch:x86

    a462a8ea5d21858d5a940280a75737bb


    Headers

    Imports

    Exports

    Sections

  • client/dat/zxycom.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • client/dat/zxysys.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • client/jlqqclient.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • client/mydll.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • client/qtintf70.dll
    .dll windows:4 windows x86 arch:x86

    a462a8ea5d21858d5a940280a75737bb


    Headers

    Imports

    Exports

    Sections

  • client/zxypu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • client/zxysysproc.DLL
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • client/帮助客户端单机版.doc
    .rtf .doc
  • server/borlndmm.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • server/dat/bmpdx.bmp
    .jpg
  • server/dat/bmpdx.jpg
    .jpg
  • server/dat/dzxcb.mdb
  • server/dat/dzxcb2.mdb
  • server/dat/person.bmp
  • server/jlqqserver.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • server/mydll.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • server/qtintf70.dll
    .dll windows:4 windows x86 arch:x86

    a462a8ea5d21858d5a940280a75737bb


    Headers

    Imports

    Exports

    Sections

  • server/zxypu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • server/zxysysproc.DLL
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • server/帮助服务端说明.doc
    .rtf .doc