Overview

overview

6

Static

static

3

流量监�...��.url

windows7-x64

1

流量监�...��.url

windows10-2004-x64

1

流量监�...e3.dll

windows7-x64

3

流量监�...e3.dll

windows10-2004-x64

3

流量监�...��.exe

windows7-x64

6

流量监�...��.exe

windows10-2004-x64

6

流量监�...et.dll

windows7-x64

3

流量监�...et.dll

windows10-2004-x64

3

流量监�...et.dll

windows7-x64

3

流量监�...et.dll

windows10-2004-x64

3

流量监�...pC.exe

windows7-x64

3

流量监�...pC.exe

windows10-2004-x64

3

流量监�...pf.sys

windows7-x64

1

流量监�...pf.sys

windows10-2004-x64

1

流量监�...gm.exe

windows7-x64

3

流量监�...gm.exe

windows10-2004-x64

3

流量监�...ls.dll

windows7-x64

3

流量监�...ls.dll

windows10-2004-x64

3

流量监�...ap.dll

windows7-x64

3

流量监�...ap.dll

windows10-2004-x64

3

流量监�...��.exe

windows7-x64

3

流量监�...��.exe

windows10-2004-x64

3

流量监�...on.exe

windows7-x64

3

流量监�...on.exe

windows10-2004-x64

3

流量监�...ro.sys

windows7-x64

1

流量监�...ro.sys

windows10-2004-x64

1

流量监�...rv.exe

windows7-x64

3

流量监�...rv.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3b238d2070534d891e30b20324d01f4_JaffaCakes118

  • Size

    1.9MB

  • MD5

    a3b238d2070534d891e30b20324d01f4

  • SHA1

    3ae68138ecd6fc419e4ac31b191c5fe8c4ce81ed

  • SHA256

    f48ee21c180f8aff6e3a72759043aca63e10985ed4f5e86c22e5b00f81ef73b9

  • SHA512

    f1d4dd7675a9b0d18e94e9ef5a871bb5712adefecb4613261933a29b2893f5915786c739eca86956639e0ab7352e0ffacc53f55185fbd7a8703da9aa79e54910

  • SSDEEP

    49152:+1hyIqV9AD/YWcgP8hzJBwqzrLAFM6fDNyCqZFPj7lcf:5V9mvP81JZrJ6bNydjj7ef

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • a3b238d2070534d891e30b20324d01f4_JaffaCakes118
    .rar
  • 流量监控绿色版/安装使用说明.txt
  • 流量监控绿色版/新云软件.url
    .url
  • 流量监控绿色版/监控端/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    2421991f15556334b0db0d0dec6811b7


    Headers

    Imports

    Exports

    Sections

  • 流量监控绿色版/监控端/网络监控.exe
    .exe windows:4 windows x86 arch:x86

    034a60bb85fa4f6d21cea77b6fcc9c42


    Headers

    Imports

    Sections

  • 流量监控绿色版/监控端/限速/Packet.dll
    .dll windows:4 windows x86 arch:x86

    a8045d201fdcff39736c580dad656cef


    Headers

    Imports

    Exports

    Sections

  • 流量监控绿色版/监控端/限速/WanPacket.dll
    .dll windows:4 windows x86 arch:x86

    d1365884b82c502a6b807942e541ebcd


    Headers

    Imports

    Exports

    Sections

  • 流量监控绿色版/监控端/限速/XArpC.exe
    .exe windows:4 windows x86 arch:x86

    1ae5f41737dd384a6de81241f2722f90


    Headers

    Imports

    Sections

  • 流量监控绿色版/监控端/限速/npf.sys
    .sys windows:5 windows x86 arch:x86

    330366a156f1cd215a328f63c2b6208b


    Headers

    Imports

    Sections

  • 流量监控绿色版/监控端/限速/npf_mgm.exe
    .exe windows:4 windows x86 arch:x86

    cca90a57f8cbd4ba808e467ec181cfd5


    Headers

    Imports

    Sections

  • 流量监控绿色版/监控端/限速/npptools.dll
    .dll windows:5 windows x86 arch:x86

    e3595d46c70e1f27e38882f3f0c99f72


    Headers

    Imports

    Exports

    Sections

  • 流量监控绿色版/监控端/限速/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    06f3d2c48036103c8a5f5cfdcf3daca1


    Headers

    Imports

    Exports

    Sections

  • 流量监控绿色版/监控端/限速/关于限速.txt
  • 流量监控绿色版/监控端/限速/限速.exe
    .exe windows:4 windows x86 arch:x86

    c2aa54fe934cd928f0e6d6de5a2836fb


    Headers

    Imports

    Sections

  • 流量监控绿色版/被监控端/NetProvision.exe
    .exe windows:4 windows x86 arch:x86

    a319e6e4bc8ba255e9c442fcbdd8b3a6


    Headers

    Imports

    Sections

  • 流量监控绿色版/被监控端/说明.txt
  • 流量监控绿色版/被监控端/进程保护安装/AKPro.sys
    .sys windows:5 windows x86 arch:x86

    be523af75ccbc7256a02f9cadb13cba1


    Headers

    Imports

    Sections

  • 流量监控绿色版/被监控端/进程保护安装/InstDrv.exe
    .exe windows:4 windows x86 arch:x86

    35d0e6a66317ea219d1ed718dfdb680d


    Headers

    Imports

    Sections

  • 流量监控绿色版/被监控端/进程保护安装/安装说明.txt
  • 流量监控绿色版/语言包/监控端/Language.ini
  • 流量监控绿色版/语言包/被监控端/Language.ini
  • 流量监控绿色版/语言包/说明.txt
  • 流量监控绿色版/赞助版与注册版说明.txt