Overview

overview

3

Static

static

3

EThread.dll

windows7-x64

3

EThread.dll

windows10-2004-x64

3

HtmlView.dll

windows7-x64

3

HtmlView.dll

windows10-2004-x64

3

eAPI.dll

windows7-x64

3

eAPI.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext3.dll

windows7-x64

3

iext3.dll

windows10-2004-x64

3

krnln.dll

windows7-x64

3

krnln.dll

windows10-2004-x64

3

safe-kill.exe

windows7-x64

3

safe-kill.exe

windows10-2004-x64

3

shellEx.dll

windows7-x64

3

shellEx.dll

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    88eeb934de665a183c2da87e0720f532_JaffaCakes118

  • Size

    980KB

  • MD5

    88eeb934de665a183c2da87e0720f532

  • SHA1

    21f18207503510c1fb8be34e8b0ca480efa12cf4

  • SHA256

    57930090c7d6dead81788987a283b0129a97c761422e46ff9cbcebe7690bc7c0

  • SHA512

    a124f3ec893dd517d7a33b2520c9df6aa7f0f2feeee5a41c22081991d8529e8bb19bea511e618b8d700afcf7955663d3d3f3ebc5fcb2424a9690bd19585c8f71

  • SSDEEP

    24576:T4WwaOnFcACJYXN4008ShZ0PlYhHhR2b/7ZxpCOZF:T4tn6ACEe008ShGlKv4N1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 88eeb934de665a183c2da87e0720f532_JaffaCakes118
    .rar
  • EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • krnln.fne
    .dll windows:4 windows x86 arch:x86

    9fd3cbd6e4bcb197c9dcf1b36d9624c7


    Headers

    Imports

    Exports

    Sections

  • safe-kill.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • shellEx.fne
    .dll windows:4 windows x86 arch:x86

    57d8c267f92579f0eedd02f56bfbc0c0


    Headers

    Imports

    Exports

    Sections

  • 截图.jpg
    .jpg
  • 新云软件.url
    .url
  • 金盾USB护航.txt