Overview

overview

3

Static

static

3

排版助�...ad.dll

windows7-x64

1

排版助�...ad.dll

windows10-2004-x64

1

排版助�...er.exe

windows7-x64

1

排版助�...er.exe

windows10-2004-x64

1

排版助�...er.dll

windows7-x64

1

排版助�...er.dll

windows10-2004-x64

1

排版助�...bj.dll

windows7-x64

1

排版助�...bj.dll

windows10-2004-x64

1

排版助�...PI.dll

windows7-x64

1

排版助�...PI.dll

windows10-2004-x64

1

排版助�...xt.dll

windows7-x64

1

排版助�...xt.dll

windows10-2004-x64

1

排版助�...t2.dll

windows7-x64

1

排版助�...t2.dll

windows10-2004-x64

1

排版助�...t5.dll

windows7-x64

1

排版助�...t5.dll

windows10-2004-x64

1

排版助�...ln.dll

windows7-x64

3

排版助�...ln.dll

windows10-2004-x64

3

排版助�...ll.dll

windows7-x64

1

排版助�...ll.dll

windows10-2004-x64

1

排版助�...Ex.dll

windows7-x64

1

排版助�...Ex.dll

windows10-2004-x64

1

排版助�...��.url

windows7-x64

1

排版助�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    30c733933f24002c2f3fd39e198b2303_JaffaCakes118

  • Size

    1.0MB

  • MD5

    30c733933f24002c2f3fd39e198b2303

  • SHA1

    389e897eb512712c53a070291cb39328ea7454db

  • SHA256

    23c6d90dc3029e7b2ae491dbdebe8faf288298deba2d0db6cf4778d2b26bd4f3

  • SHA512

    c63eea98659ad9e42951a873f053d15d91b17fe5f1ae1ab1adbfcb794e8f63273f8fd9a252cf6a133daa1286612815bd7818ecc2a87876b0340ba36b666f41d2

  • SSDEEP

    24576:WxMuiNyGAAMNDgZk+6Kid/RFYGCwHJUB0D2GVgficwwaSg8zb5IZzirM/P:We4CZN6Km/RFHCwW0DFVeicvn5WzD3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 30c733933f24002c2f3fd39e198b2303_JaffaCakes118
    .rar
  • 排版助手3.0.5/EThread.DLL
    .dll windows:4 windows x86 arch:x86

    62e5db1ba371409d5b2d25cef78e9ce3


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/GidotTypesetter.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 排版助手3.0.5/WebBrowser.DLL
    .dll windows:4 windows x86 arch:x86

    d6c10922930d9f368d6de12c4ab43426


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/commobj.DLL
    .dll windows:4 windows x86 arch:x86

    224f5ab43692f06b61f1b90ff21c22b1


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/eAPI.DLL
    .dll windows:4 windows x86 arch:x86

    cfd45f31cfba7626164409676ad5126d


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/iext.DLL
    .dll windows:4 windows x86 arch:x86

    e989acea6d070c10539cbced2778463c


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/iext2.DLL
    .dll windows:4 windows x86 arch:x86

    a73b5b09a73efa33e8f16f44cfdc3da6


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/iext5.DLL
    .dll windows:4 windows x86 arch:x86

    4aa85b79d70fadaaacf99768203aa6ac


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/krnln.DLL
    .dll windows:4 windows x86 arch:x86

    99d172ab7606fe66397dc07fc2ccbd6a


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/readme.txt
  • 排版助手3.0.5/shell.DLL
    .dll windows:4 windows x86 arch:x86

    7bfe20f314273547fb9502c64706871e


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/shellEx.DLL
    .dll windows:4 windows x86 arch:x86

    83c5a1bfd08221cfa9c880c04f59a4e7


    Headers

    Imports

    Exports

    Sections

  • 排版助手3.0.5/新云软件.url
    .url
  • 排版助手3.0.5/测试文本/前后乱码+按字符换行.txt
  • 排版助手3.0.5/测试文本/普通测试文本.txt
  • 排版助手3.0.5/测试文本/标点修正测试.txt
  • 排版助手3.0.5/测试文本/清除非段落换行测试文本.txt