Overview

overview

3

Static

static

3

SkyShield/ExtMenu.dll

windows7-x64

1

SkyShield/ExtMenu.dll

windows10-2004-x64

1

SkyShield/...ld.exe

windows7-x64

1

SkyShield/...ld.exe

windows10-2004-x64

1

SkyShield/downlib.dll

windows7-x64

1

SkyShield/downlib.dll

windows10-2004-x64

1

SkyShield/dp1.dll

windows7-x64

3

SkyShield/dp1.dll

windows10-2004-x64

3

SkyShield/eAPI.dll

windows7-x64

1

SkyShield/eAPI.dll

windows10-2004-x64

1

SkyShield/...ss.dll

windows7-x64

1

SkyShield/...ss.dll

windows10-2004-x64

1

SkyShield/help.chm

windows7-x64

1

SkyShield/help.chm

windows10-2004-x64

1

SkyShield/iext.dll

windows7-x64

1

SkyShield/iext.dll

windows10-2004-x64

1

SkyShield/iext2.dll

windows7-x64

1

SkyShield/iext2.dll

windows10-2004-x64

1

SkyShield/iext5.dll

windows7-x64

1

SkyShield/iext5.dll

windows10-2004-x64

1

SkyShield/krnln.dll

windows7-x64

1

SkyShield/krnln.dll

windows10-2004-x64

1

SkyShield/...��.url

windows7-x64

1

SkyShield/...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bc320340d7156c64d723329cc460ade_JaffaCakes118

  • Size

    1.9MB

  • MD5

    5bc320340d7156c64d723329cc460ade

  • SHA1

    ab7970f67042461cf52ed38e0dada06e336826f0

  • SHA256

    8b0b09eb02d2a553a74b8d106486b411fb3e2ff50dd3d685856f1d90d755d7bc

  • SHA512

    3a0f3bc8929ff2ae0439be7ad9e77fc9447c0a24597634c5f3d51331757b1049fc6c007939f131a9ab4be550db46fa927b873356827147d141bbc10a5e6a19fc

  • SSDEEP

    49152:8htweE1ADvlfPLYzOEpyABE7bmlGp7YxO/iGZ6MPFWB:UsO5LYzHJobmlAztP4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bc320340d7156c64d723329cc460ade_JaffaCakes118
    .rar
  • SkyShield/ChineseSimplified.lang
  • SkyShield/ChineseTraditional.lang
  • SkyShield/English.lang
  • SkyShield/ExtMenu.DLL
    .dll windows:4 windows x86 arch:x86

    472b95d04dba8e53958d2b826a76dce5


    Headers

    Imports

    Exports

    Sections

  • SkyShield/SkyShield.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkyShield/clst.db
  • SkyShield/dat.p
  • SkyShield/downlib.DLL
    .dll windows:4 windows x86 arch:x86

    5b7b89cf97e6c9cb92a256b4dc3df833


    Headers

    Imports

    Exports

    Sections

  • SkyShield/dp1.DLL
    .dll windows:4 windows x86 arch:x86

    add5dd1fa4b0387f15fda385fe0b8dbe


    Headers

    Imports

    Exports

    Sections

  • SkyShield/eAPI.DLL
    .dll windows:4 windows x86 arch:x86

    427eb39584a9f7cdf9555afee9d5ccff


    Headers

    Imports

    Exports

    Sections

  • SkyShield/eCompress.DLL
    .dll windows:4 windows x86 arch:x86

    8ff650a0e5dac613c5ee06a64bb8862b


    Headers

    Imports

    Exports

    Sections

  • SkyShield/help.chm
    .chm
  • SkyShield/iext.DLL
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • SkyShield/iext2.DLL
    .dll windows:4 windows x86 arch:x86

    ff1ef500c2df53cbe90e82a34460179a


    Headers

    Imports

    Sections

  • SkyShield/iext5.DLL
    .dll windows:4 windows x86 arch:x86

    33bdca2e2ea9de9ba47bcab3a7a7011f


    Headers

    Imports

    Exports

    Sections

  • SkyShield/krnln.Dll
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • SkyShield/新云软件.url
    .url