Overview

overview

3

Static

static

1

winlogonhi...l.html

windows7-x64

3

winlogonhi...l.html

windows10-2004-x64

3

winlogonhi...r.html

windows7-x64

3

winlogonhi...r.html

windows10-2004-x64

3

winlogonhi...e.html

windows7-x64

3

winlogonhi...e.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ca5e77dbbf69910310f2c23bd07eb05_JaffaCakes118

  • Size

    110KB

  • MD5

    8ca5e77dbbf69910310f2c23bd07eb05

  • SHA1

    cde6ac105f73d1699c4a5587d4992df22e2c86c2

  • SHA256

    9bade49f446c838bb8bc9d724008e8ec97ca9aa9e42850bbaacc2d6a904e3915

  • SHA512

    8d6dbf65e0469a8a6c2a7af31bfdee39eda21418b7415f4a12c198976a93bb401385ac0ea3b2112a269b084507271987572a2d2b425726f644b453f58a9aa115

  • SSDEEP

    3072:/CqumryLRomEejjLAmCmryLRomEejjC0miWmH2:/Cqumm5E2jEtmm5E2jCCp2

Score
1/10

Malware Config

Signatures

Files

  • 8ca5e77dbbf69910310f2c23bd07eb05_JaffaCakes118
    .rar
  • winlogonhijack/HookDll/HookDll.dsp
  • winlogonhijack/HookDll/HookDll.plg
    .html
  • winlogonhijack/HookDll/LDE32.OBJ
  • winlogonhijack/HookDll/hook.c
  • winlogonhijack/HookDll/hook.h
  • winlogonhijack/HookDll/libeay32.lib
  • winlogonhijack/HookDll/log.c
  • winlogonhijack/HookDll/log.h
  • winlogonhijack/HookDll/maindll.c
  • winlogonhijack/HookDll/maindll.h
  • winlogonhijack/HookDll/openssl/opensslconf.h
  • winlogonhijack/HookDll/openssl/rc4.c
  • winlogonhijack/HookDll/openssl/rc4.h
  • winlogonhijack/HookDll/wlxloggedoutsas.h
  • winlogonhijack/Injector/Injector.dsp
  • winlogonhijack/Injector/Injector.plg
    .html
  • winlogonhijack/Injector/injector.c
  • winlogonhijack/Injector/injector.h
  • winlogonhijack/Injector/main.c
  • winlogonhijack/Logdecode/Logdecode.dsp
  • winlogonhijack/Logdecode/Logdecode.plg
    .html
  • winlogonhijack/Logdecode/libeay32.lib
  • winlogonhijack/Logdecode/main.c
  • winlogonhijack/Logdecode/openssl/opensslconf.h
  • winlogonhijack/Logdecode/openssl/rc4.c
  • winlogonhijack/Logdecode/openssl/rc4.h
  • winlogonhijack/readme.txt
  • winlogonhijack/winlogonhijack.dsw
  • winlogonhijack/winlogonhijack.opt