Overview

overview

3

Static

static

3

ePY.dll

windows7-x64

1

ePY.dll

windows10-2004-x64

1

iext.dll

windows7-x64

1

iext.dll

windows10-2004-x64

1

iext2.dll

windows7-x64

1

iext2.dll

windows10-2004-x64

1

iext3.dll

windows7-x64

1

iext3.dll

windows10-2004-x64

1

krnln.dll

windows7-x64

1

krnln.dll

windows10-2004-x64

1

mp3.dll

windows7-x64

1

mp3.dll

windows10-2004-x64

3

script.dll

windows7-x64

1

script.dll

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

灵者更名.exe

windows7-x64

3

灵者更名.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    671f93f330c869d1bf7397b989443ec2_JaffaCakes118

  • Size

    1.2MB

  • MD5

    671f93f330c869d1bf7397b989443ec2

  • SHA1

    ef6cb7e34431001bf2c26084e09296f1917047d6

  • SHA256

    02705d570610e696a0f551ee728d3ee9845334f74a39844c4ff69e62e5bcb084

  • SHA512

    ade063468d3ed6553188c96daf81c79d153a3d5ab76421142392258b2b4c5314eb799a765cecf87eaeccb06c5bb59da49c69c05e29906a8b68c85a88a4a2c06e

  • SSDEEP

    24576:Bjgo0eINSKgwwVex9ojwZJacuWfOi/JlOT/Ia+nw3BFgk:B8o0/SKZwVCZJxr2iY/Iu3gk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 671f93f330c869d1bf7397b989443ec2_JaffaCakes118
    .rar
  • ePY.fne
    .dll windows:4 windows x86 arch:x86

    24070adfd9defefa18c2a02553926fdf


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • mp3.run
    .dll windows:4 windows x86 arch:x86

    b6bf5d87f968f983290fecac8b99c4b3


    Headers

    Imports

    Exports

    Sections

  • script.fne
    .dll windows:4 windows x86 arch:x86

    71874d157b7e276e2c88d322a253db69


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url
  • 灵者更名.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections