Overview

overview

7

Static

static

3

data/Backup.dll

windows7-x64

1

data/Backup.dll

windows10-2004-x64

1

data/dywt.dll

windows7-x64

1

data/dywt.dll

windows10-2004-x64

1

data/新云软件.url

windows7-x64

1

data/新云软件.url

windows10-2004-x64

1

diary.exe

windows7-x64

7

diary.exe

windows10-2004-x64

7

ul.dll

windows7-x64

1

ul.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d02c0a2b9e9f3a462c38a40a876b160_JaffaCakes118

  • Size

    2.2MB

  • MD5

    3d02c0a2b9e9f3a462c38a40a876b160

  • SHA1

    67daa9d4e5eaf9f2e28717ab62285a32a7ea355d

  • SHA256

    75f8504418b889ac8f68dc17b57f53995a4ac375abf7254c752b7d9a14d2b953

  • SHA512

    20993ca3fece32366b5a03d5f60955b15903b429de103074d6d9cace209e75bfe490fcd93a1bd3058805903c03100c76adb215bb37c5ea9a0e6158442b742ed7

  • SSDEEP

    49152:5pgoVAm5hyL+ql//lRFQy9ZhUMeI/MsZQ5hnw4eW4tz2U4PT:372m5hyLNl/rpHZK5hnw/WKSUY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d02c0a2b9e9f3a462c38a40a876b160_JaffaCakes118
    .rar
  • data/Backup.dll
  • data/TIMER_FORGET.DATA
  • data/TIMER_SET.DATA
  • data/dywt.dll
  • data/dywt.emp
  • data/system.dat
  • data/新云软件.url
    .url
  • diary.exe
    .exe windows:4 windows x86 arch:x86

    65ae5cf17140aeaf91e3e9911da0ee3e


    Headers

    Imports

    Sections

  • ul.dll
  • 初始密码.txt