Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

Jxft.dll

windows7-x64

7

Jxft.dll

windows10-2004-x64

7

Jxfy.dll

windows7-x64

7

Jxfy.dll

windows10-2004-x64

7

Update.exe

windows7-x64

5

Update.exe

windows10-2004-x64

5

剑侠飞云.exe

windows7-x64

7

剑侠飞云.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    94b9f3951241433cf742ffd9d668b35c_JaffaCakes118

  • Size

    3.8MB

  • MD5

    94b9f3951241433cf742ffd9d668b35c

  • SHA1

    65b780a72993ae940438b231ec62f78049451368

  • SHA256

    cd08c5fdf5c0dbae176eb630c7d6d5504a5c7c235b72a99b7f6f15473f9bfb66

  • SHA512

    f36457e67d834c4939b2fd88686882f82db44039795721566533eb5409342b4e5b5da209f05050d59f92b0dc563254e1f1a86b680fd2cefaaba876ab41fcbc00

  • SSDEEP

    98304:4NDsiIEtQCkowGA4M7+CrZ+Sk65EILROpGyjAcf+Jt:eJt4jG9M7x5jtOMyjAcfa

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 3 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 94b9f3951241433cf742ffd9d668b35c_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • Jxft.dll
    .dll windows:4 windows x86 arch:x86

    4e7428125a638b36fd39972c916be9c8


    Headers

    Imports

    Sections

  • Jxfy.dll
    .dll windows:4 windows x86 arch:x86

    9d6716d140c13a4379fda118798dff45


    Headers

    Imports

    Exports

    Sections

  • Sound/Warning.wav
  • Update.dat
    .exe windows:4 windows x86 arch:x86

    6904713616e7e3eba10995d680a55f9d


    Headers

    Imports

    Sections

  • ver.ini
  • 剑侠飞云.exe
    .exe windows:4 windows x86 arch:x86

    28eb6c638142be5637f8e4f0ebe83757


    Headers

    Imports

    Sections