Overview

overview

7

Static

static

7

zwgfsrf.exe

windows7-x64

7

zwgfsrf.exe

windows10-2004-x64

7

中文规�...36.dll

windows7-x64

1

中文规�...36.dll

windows10-2004-x64

1

中文规�...HM.chm

windows7-x64

1

中文规�...HM.chm

windows10-2004-x64

1

中文规�...ow.dll

windows7-x64

1

中文规�...ow.dll

windows10-2004-x64

1

中文规�...36.exe

windows7-x64

1

中文规�...36.exe

windows10-2004-x64

1

中文规�...IM.exe

windows7-x64

1

中文规�...IM.exe

windows10-2004-x64

1

中文规�...hm.dll

windows7-x64

1

中文规�...hm.dll

windows10-2004-x64

1

中文规�...eg.exe

windows7-x64

1

中文规�...eg.exe

windows10-2004-x64

1

中文规�...dm.dll

windows7-x64

1

中文规�...dm.dll

windows10-2004-x64

1

中文规�...��.url

windows7-x64

1

中文规�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3691ed558b410f33aef65e622b994fd1_JaffaCakes118

  • Size

    17.3MB

  • MD5

    3691ed558b410f33aef65e622b994fd1

  • SHA1

    2de6179164048ad7b9c50339a7acf0222faf54cf

  • SHA256

    59a48b61b385be9b597d875920e8fd750e943cb7fac6e80106867aafc9fa02b1

  • SHA512

    9dac8e9eb2dba40e5b76db2f0a9ec6940d1955473896185ac1ef23a949086eca5e31d5abb78ffe7cf5f0d914fd8365c2e5be7f10235a780527fc1b56fa7fe0d7

  • SSDEEP

    393216:G3P5Gaa0anatBHt9HjFW3wFoFiHCj2rIouMpzApugaFsTTZoIgI:G3Pa2BHt9HxVocHCjisMpzA06ZJp

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 3691ed558b410f33aef65e622b994fd1_JaffaCakes118
    .rar
  • zwgfsrf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 中文规范输入法标准版/936.dll
    .dll windows:4 windows x86 arch:x86

    2013be6d8ab57d6abc7d20d2178d81f1


    Headers

    Imports

    Sections

  • 中文规范输入法标准版/BHM.chm
    .chm
  • 中文规范输入法标准版/BHZT.FON
  • 中文规范输入法标准版/Bhhzshow.dll
    .dll windows:4 windows x86 arch:x86

    39cd5b55a8296190e8e65bcb600ee049


    Headers

    Imports

    Exports

    Sections

  • 中文规范输入法标准版/Bhm.jm
  • 中文规范输入法标准版/Bhm.msm
  • 中文规范输入法标准版/Bhm.zx
  • 中文规范输入法标准版/Bhm.zxb
  • 中文规范输入法标准版/Bhm.zxf
  • 中文规范输入法标准版/Htkai.fda
  • 中文规范输入法标准版/Htkai.fid
  • 中文规范输入法标准版/Htkai.fsk
  • 中文规范输入法标准版/Htsong.fda
  • 中文规范输入法标准版/Htsong.fid
  • 中文规范输入法标准版/Htsong.fsk
  • 中文规范输入法标准版/Icon.ico
  • 中文规范输入法标准版/License.txt
  • 中文规范输入法标准版/R936.exe
    .exe windows:4 windows x86 arch:x86

    aab6b0599e97d14e578049513f802815


    Headers

    Imports

    Sections

  • 中文规范输入法标准版/SetupCIM.exe
    .exe windows:4 windows x86 arch:x86

    edac2d5015e73bd58f5379829b1717b9


    Headers

    Imports

    Sections

  • 中文规范输入法标准版/SetupCIM.ini
  • 中文规范输入法标准版/bhm.ime
    .dll windows:4 windows x86 arch:x86

    c79e61be1ca1a82b7736f55203db3d41


    Headers

    Imports

    Exports

    Sections

  • 中文规范输入法标准版/bhm.zk
  • 中文规范输入法标准版/bsreg.exe
    .exe windows:4 windows x86 arch:x86

    3d1145c0ccfdc02665e98bdb3f78f524


    Headers

    Imports

    Sections

  • 中文规范输入法标准版/bsreg1.txt
  • 中文规范输入法标准版/dm.dll
    .dll windows:4 windows x86 arch:x86

    99049a9449d7c4168fe4a46183aea8a1


    Headers

    Imports

    Exports

    Sections

  • 中文规范输入法标准版/dm.vxd
  • 中文规范输入法标准版/新云软件.url
    .url
  • 中文规范输入法标准版/许可号.txt