Overview

overview

7

Static

static

7

PEiD.exe

windows7-x64

7

PEiD.exe

windows10-2004-x64

7

plugins/GenOEP.dll

windows7-x64

1

plugins/GenOEP.dll

windows10-2004-x64

1

plugins/ImpREC.dll

windows7-x64

3

plugins/ImpREC.dll

windows10-2004-x64

3

plugins/ZDRx.dll

windows7-x64

1

plugins/ZDRx.dll

windows10-2004-x64

3

plugins/kanal.dll

windows7-x64

7

plugins/kanal.dll

windows10-2004-x64

7

plugins/kanal.htm

windows7-x64

1

plugins/kanal.htm

windows10-2004-x64

1

plugins/�...��.url

windows7-x64

1

plugins/�...��.url

windows10-2004-x64

1

pluginsdk/...le.bat

windows7-x64

1

pluginsdk/...le.bat

windows10-2004-x64

1

pluginsdk/...in.vbs

windows7-x64

1

pluginsdk/...in.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38f021637c553e7b422c2d509461a72c_JaffaCakes118

  • Size

    386KB

  • MD5

    38f021637c553e7b422c2d509461a72c

  • SHA1

    e4b5ba9d43746bcdff36de1a5ec25ce43b676c70

  • SHA256

    f0312bb0e825e5786d08e93f63c1880fbae8f8cbc45f0955e2ea74becc3ef27e

  • SHA512

    247ab2c97b35ea99c97e1bf72955c2793c93d42b28230dca8454bac19ee3ffc66a598957ab73db5fb4fae9967d5709bd657da4a3fdc20238a058532b86cb1780

  • SSDEEP

    12288:2D/Pe/vTlYQMKRQlFM9aKH/HTGeubZCp5qwf4f9c:2DXejlYQMKRQ0zrGeu1WMf+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 38f021637c553e7b422c2d509461a72c_JaffaCakes118
    .rar
  • PEiD.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • external.txt
  • plugins/GenOEP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/ImpREC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/ZDRx.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/kanal.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/kanal.htm
    .html
  • plugins/新云软件.url
    .url
  • pluginsdk/C++/defs.h
  • pluginsdk/C++/null.c
  • pluginsdk/Delphi/Sample.dpr
  • pluginsdk/MASM/compile.bat
  • pluginsdk/MASM/masm_plugin.asm
  • pluginsdk/MASM/masm_plugin.def
  • pluginsdk/PowerBASIC/PEiD_Plugin.bas
    .vbs
  • pluginsdk/readme.txt
  • readme.txt
  • userdb.txt