Overview

overview

7

Static

static

7

MDScan.dll

windows7-x64

1

MDScan.dll

windows10-2004-x64

1

MDecoder.exe

windows7-x64

1

MDecoder.exe

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b01f5ff840ee6d4208deaf505c1a680_JaffaCakes118

  • Size

    1.2MB

  • MD5

    3b01f5ff840ee6d4208deaf505c1a680

  • SHA1

    d881b48c129d025e1f1e6b2c3fac68b0e99433b5

  • SHA256

    3e3ea9573e7f8217d0f7e46de56c06e7db2541fe59b662d29738a97f2bda7b8d

  • SHA512

    5b8f54e5447e110f98c5b0e1bb96e584a17c9f8735a41ab95bc8db91cfd428959ebb802859e2759c283dfd092a22cf0becd6b42420f94cd4da070090404a6dc8

  • SSDEEP

    24576:opICdGVE2wPOLsVd4QmMEmXvcqrYUNaT0c6td0YXluDIpN1OqBv/8T6EcKm8dGgn:ocDwPOLaOQmDqrtf/0+9rvlYmsG1YKz6

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b01f5ff840ee6d4208deaf505c1a680_JaffaCakes118
    .rar
  • MDScan.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MDecoder.exe
    .exe windows:5 windows x86 arch:x86

    489438b56c04b681673046539073eb79


    Headers

    Imports

    Sections

  • wdomain.ini
  • 新云软件.url
    .url