Overview

overview

7

Static

static

7

好友买�...ad.dll

windows7-x64

3

好友买�...ad.dll

windows10-2004-x64

3

好友买�...ew.dll

windows7-x64

3

好友买�...ew.dll

windows10-2004-x64

3

好友买�...EL.dll

windows7-x64

7

好友买�...EL.dll

windows10-2004-x64

7

好友买�...p1.dll

windows7-x64

3

好友买�...p1.dll

windows10-2004-x64

3

好友买�...nv.dll

windows7-x64

3

好友买�...nv.dll

windows10-2004-x64

3

好友买�...xt.dll

windows7-x64

3

好友买�...xt.dll

windows10-2004-x64

3

好友买�...on.dll

windows7-x64

3

好友买�...on.dll

windows10-2004-x64

3

好友买�...ln.dll

windows7-x64

3

好友买�...ln.dll

windows10-2004-x64

3

好友买�...pt.dll

windows7-x64

3

好友买�...pt.dll

windows10-2004-x64

3

好友买�...Ex.dll

windows7-x64

3

好友买�...Ex.dll

windows10-2004-x64

3

好友买�...ec.dll

windows7-x64

3

好友买�...ec.dll

windows10-2004-x64

3

好友买�...��.exe

windows7-x64

3

好友买�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    853bcc66022ef97b9d4aa3bcdf6d03bb_JaffaCakes118

  • Size

    1.3MB

  • MD5

    853bcc66022ef97b9d4aa3bcdf6d03bb

  • SHA1

    d9ef6eae0a08f06b83e735632e61db31ba6c7a87

  • SHA256

    0a5e1ad3bd24ad37a5fad6c10c94190e5aaa6cd14a2aded3a1935fd3a4b9aa49

  • SHA512

    9a4329e19ba01d5671b23783c46dfa6640cd171f2df8ba71bd6f76b26c7bcd518fc546352219da8c651e2af4c5049a53559cea3fb51e21a631f42ee9a2db6f7a

  • SSDEEP

    24576:zwioWY7XW+vN8APXyaQy4UZYKIFDaHtkcZxNRYb3bx0JtFlc498/:kXz8ITQyfYKIFGecfHs3ilc9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 853bcc66022ef97b9d4aa3bcdf6d03bb_JaffaCakes118
    .rar
  • 好友买卖-粉粉辅助/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 好友买卖-粉粉辅助/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/iconv.fne
    .dll windows:4 windows x86 arch:x86

    786b7bd5b5d9aef58b0ae2c290907587


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/json.fnr
    .dll windows:4 windows x86 arch:x86

    9d8aad1d5894a081f08aa2899109d45e


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/script.fne
    .dll windows:4 windows x86 arch:x86

    71874d157b7e276e2c88d322a253db69


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    57d8c267f92579f0eedd02f56bfbc0c0


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 好友买卖-粉粉辅助/好友买卖-粉粉辅助.exe
    .exe .js windows:4 windows x86 arch:x86 polyglot

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections