Overview

overview

3

Static

static

3

yg/新云软件.url

windows7-x64

1

yg/新云软件.url

windows10-2004-x64

1

yg/阳光�...Fx.dll

windows7-x64

1

yg/阳光�...Fx.dll

windows10-2004-x64

1

yg/阳光�...ib.dll

windows7-x64

1

yg/阳光�...ib.dll

windows10-2004-x64

1

yg/阳光�...ib.dll

windows7-x64

1

yg/阳光�...ib.dll

windows10-2004-x64

1

yg/阳光�...on.dll

windows7-x64

1

yg/阳光�...on.dll

windows10-2004-x64

1

yg/阳光�...ck.dll

windows7-x64

1

yg/阳光�...ck.dll

windows10-2004-x64

1

yg/阳光�...nt.dll

windows7-x64

1

yg/阳光�...nt.dll

windows10-2004-x64

1

yg/阳光�...ml.dll

windows7-x64

1

yg/阳光�...ml.dll

windows10-2004-x64

1

yg/阳光�...ne.exe

windows7-x64

1

yg/阳光�...ne.exe

windows10-2004-x64

1

yg/阳光�...et.dll

windows7-x64

1

yg/阳光�...et.dll

windows10-2004-x64

1

yg/阳光�...05.dll

windows7-x64

3

yg/阳光�...05.dll

windows10-2004-x64

3

yg/阳光�...��.exe

windows7-x64

3

yg/阳光�...��.exe

windows10-2004-x64

3

yg/阳光�...��.exe

windows7-x64

3

yg/阳光�...��.exe

windows10-2004-x64

3

yg/阳光�...��.exe

windows7-x64

3

yg/阳光�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    895bb7051dd900d0aca03b766121c0a4_JaffaCakes118

  • Size

    1.7MB

  • MD5

    895bb7051dd900d0aca03b766121c0a4

  • SHA1

    02514dfecf1f378e8e92af12fed8648c845c6368

  • SHA256

    9fbfdc959ab468123cf3bb014a40ffaa479e91f41faaf66147a897ed3e6d131e

  • SHA512

    77f2912f24eea0381a8d69f1538a8e737330f743c2498a0e3825ed12425f819fe28e7cb3ac25bd8dce234820bee828ccd38e536074cb1e6da1304efe2a7f495d

  • SSDEEP

    49152:m8hlKc10nnCbg7T0ndQPFesO0hC+wVi3kG:jh30n6g0dKFesOU/w0Z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 895bb7051dd900d0aca03b766121c0a4_JaffaCakes118
    .rar
  • yg/QQ阳光小黑介绍.txt
  • yg/新云软件.url
    .url
  • yg/运行不了请看.txt
  • yg/阳光小黑/AboutTime.ini
  • yg/阳光小黑/FluorineFx.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/Interop.QuartzTypeLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/Jayrock.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/Jayrock.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/Microsoft.mshtml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/UpdateOnline.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • yg/阳光小黑/allCookie.data
  • yg/阳光小黑/config.ini
  • yg/阳光小黑/log4net.config
    .xml
  • yg/阳光小黑/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • yg/阳光小黑/skincrafter.net-vs2005.dll
    .dll windows:4 windows x86 arch:x86

    cc59c365bc885f06f0cee2d725f51cae


    Headers

    Imports

    Sections

  • yg/阳光小黑/对时软件.exe
    .exe windows:4 windows x86 arch:x86

    fab24e6236b944ad601e2f8dc6827a5c


    Headers

    Imports

    Sections

  • yg/阳光小黑/运行不了辅助工具请先运行我吧.exe
    .exe windows:5 windows x86 arch:x86

    c32bbe9fc4a1294318cc1dd7b4d0eea3


    Headers

    Imports

    Sections

  • yg/阳光小黑/阳光小黑.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • yg/阳光小黑/阳光小黑.exe.config
    .xml