Overview

overview

8

Static

static

3

DeleteApp.exe

windows7-x64

1

DeleteApp.exe

windows10-2004-x64

1

Interop.MS...ol.dll

windows7-x64

1

Interop.MS...ol.dll

windows10-2004-x64

1

Microsoft.mshtml.dll

windows7-x64

1

Microsoft.mshtml.dll

windows10-2004-x64

1

NetWorkBase.dll

windows7-x64

3

NetWorkBase.dll

windows10-2004-x64

3

RefreshIp.exe

windows7-x64

8

RefreshIp.exe

windows10-2004-x64

3

ZdDll.dll

windows7-x64

1

ZdDll.dll

windows10-2004-x64

1

db/新云软件.url

windows7-x64

1

db/新云软件.url

windows10-2004-x64

1

help.chm

windows7-x64

1

help.chm

windows10-2004-x64

1

智动软�...��.url

windows7-x64

1

智动软�...��.url

windows10-2004-x64

1

软件中�...��.url

windows7-x64

1

软件中�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    739a6c28f7ec63dc6433a9c7a70cfbbe_JaffaCakes118

  • Size

    3.3MB

  • MD5

    739a6c28f7ec63dc6433a9c7a70cfbbe

  • SHA1

    2232bf0a7b1015e8caad9d5848c13b94b300eec7

  • SHA256

    a2449c79c1407884ba2285eabce3cb14a4f72f3ca99a99f53bbc9bfc36f061a7

  • SHA512

    a22a690b526a0f589010bc96c9b13d2d463cdb653f57f866c996315bccdcfd398bf2506ab45da37fb2637cbf7e4c332a78a16b1aa32692598ea591f991dfdcbf

  • SSDEEP

    98304:Piz96aT3ldYFKEcdgpK3OXr7GBD0Z13II44GLe:Piz80d2KEcB5oZ13Mde

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 739a6c28f7ec63dc6433a9c7a70cfbbe_JaffaCakes118
    .rar
  • Config.xml
  • DeleteApp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Interop.MSScriptControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.mshtml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NetWorkBase.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RefreshIp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RefreshIp.exe.config
    .xml
  • ZdDll.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • db/AdslPass.db
  • db/CheckProxy.db
  • db/Ip.DAT
  • db/IpAddress.db
  • db/Proxy.db
  • db/ProxyMask.db
  • db/UserHeader.db
  • db/UserInfo.db
  • db/data.mdb
  • db/新云软件.url
    .url
  • help.chm
    .chm
  • 使用协议.txt
  • 智动软件 - 站长优化推广网站好帮手.url
    .url
  • 注意： 使用本软件前必看.txt
  • 软件中心 - 智动终级刷IP工具 - 智动软件.url
    .url