Overview

overview

3

Static

static

3

webtext130...xt.exe

windows7-x64

1

webtext130...xt.exe

windows10-2004-x64

1

webtext130...vp.dll

windows7-x64

1

webtext130...vp.dll

windows10-2004-x64

1

webtext130...on.dll

windows7-x64

1

webtext130...on.dll

windows10-2004-x64

3

webtext130...e3.dll

windows7-x64

1

webtext130...e3.dll

windows10-2004-x64

3

webtext130...��.url

windows7-x64

1

webtext130...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    654b0eb986f0b59197408e9cca1494b5_JaffaCakes118

  • Size

    715KB

  • MD5

    654b0eb986f0b59197408e9cca1494b5

  • SHA1

    12f8d2bf49cb55a01e798c8ae4fafe05eff841b6

  • SHA256

    e4ff31f5664460ec10ddf923ab920c5cd0598edf66c812a26bc76075500a27cf

  • SHA512

    1ae45170fe27ccd97e55b9731e2e945aea925e9600a84c377b7d58b1d4d6c93d69e1a513a98766330dcda250f050cc6ed9b286c7853c437a45801b0551cdd1a4

  • SSDEEP

    12288:EeSkO3/1d4AvMR7CNP/sHdAwnWcHBFG2RXUFFIi+j3lwQNPeb6CFrLmEdI36TLXP:Ee8n4+MRCNQlHxRX2WfNS1ndnZXfvZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 654b0eb986f0b59197408e9cca1494b5_JaffaCakes118
    .rar
  • webtext1300/WebText.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • webtext1300/dll/Advp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • webtext1300/dll/B5_GB.dtt
  • webtext1300/dll/Common.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • webtext1300/dll/Help.txt
  • webtext1300/dll/pcre3.dll
    .dll windows:4 windows x86 arch:x86

    f867eaba1f47d94594c5bf1041b8c10b


    Headers

    Imports

    Exports

    Sections

  • webtext1300/dll/webtext.ini
  • webtext1300/readme.txt
  • webtext1300/新云软件.url
    .url