Overview

overview

7

Static

static

7

dnwx/Skin.dll

windows7-x64

7

dnwx/Skin.dll

windows10-2004-x64

7

dnwx/dnwx.exe

windows7-x64

7

dnwx/dnwx.exe

windows10-2004-x64

7

dnwx/eAPI.dll

windows7-x64

3

dnwx/eAPI.dll

windows10-2004-x64

3

dnwx/eCompress.dll

windows7-x64

3

dnwx/eCompress.dll

windows10-2004-x64

3

dnwx/iext.dll

windows7-x64

3

dnwx/iext.dll

windows10-2004-x64

3

dnwx/iext2.dll

windows7-x64

3

dnwx/iext2.dll

windows10-2004-x64

3

dnwx/iext3.dll

windows7-x64

3

dnwx/iext3.dll

windows10-2004-x64

3

dnwx/internet.dll

windows7-x64

3

dnwx/internet.dll

windows10-2004-x64

3

dnwx/krnln.dll

windows7-x64

3

dnwx/krnln.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    94d5e2748fc76a3e8c05ca38a18a2070_JaffaCakes118

  • Size

    1.3MB

  • MD5

    94d5e2748fc76a3e8c05ca38a18a2070

  • SHA1

    11dddafc366987d6e5de3e415c6a5a4c809a48c5

  • SHA256

    e1ede2e54bc16362a23c720e478611a1f483ae484a7d21382088123b698f6eba

  • SHA512

    d78968cdc092578140cbd833411fdd6da7469ce7bc09ceabca6894e51e4878257eb36882dcf24d185800ea03ab70f0c725318aecac6968de826936e61063457c

  • SSDEEP

    24576:8YVyRP0WCfwGMkn2fHYl7Gmvd+Z2oZhcKjzd3J6yi1uKgh0ktvpz2CPs3Eoy:HVyR6wG72f4NvEZ2oTl3d3K1wiktBSS/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 94d5e2748fc76a3e8c05ca38a18a2070_JaffaCakes118
    .rar
  • dnwx/Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • dnwx/config.ini
  • dnwx/data/data.edb
  • dnwx/data/data.rar
    .rar
  • cp.enx
  • dh.enx
  • dh2.enx
  • dz.enx
  • fy.enx
  • rq.enx
  • sh.enx
  • shry.enx
  • wxry.enx
  • xm.enx
  • dnwx/data/data1.edb
  • dnwx/data/data2.edb
  • dnwx/dnwx.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • dnwx/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • dnwx/eCompress.fne
    .dll windows:4 windows x86 arch:x86

    7117536c77f74711fc29c003e012cf45


    Headers

    Imports

    Exports

    Sections

  • dnwx/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • dnwx/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • dnwx/iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • dnwx/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • dnwx/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • dnwx/skin/1.she
  • dnwx/skin/2.she
  • dnwx/skin/3.she
  • dnwx/skin/4.she
  • dnwx/skin/5.she
  • dnwx/skin/6.she