Overview

overview

7

Static

static

7

编程助�...Ex.dll

windows7-x64

3

编程助�...Ex.dll

windows10-2004-x64

3

编程助�...nu.dll

windows7-x64

3

编程助�...nu.dll

windows10-2004-x64

3

编程助�...ew.dll

windows7-x64

3

编程助�...ew.dll

windows10-2004-x64

3

编程助�...IE.exe

windows7-x64

3

编程助�...IE.exe

windows10-2004-x64

3

编程助�...ll.dll

windows7-x64

3

编程助�...ll.dll

windows10-2004-x64

3

编程助�...PX.dll

windows7-x64

3

编程助�...PX.dll

windows10-2004-x64

3

编程助�...lc.dll

windows7-x64

3

编程助�...lc.dll

windows10-2004-x64

3

编程助�...om.dll

windows7-x64

3

编程助�...om.dll

windows10-2004-x64

3

编程助�...bj.dll

windows7-x64

3

编程助�...bj.dll

windows10-2004-x64

3

编程助�...PI.dll

windows7-x64

3

编程助�...PI.dll

windows10-2004-x64

3

编程助�...ia.dll

windows7-x64

3

编程助�...ia.dll

windows10-2004-x64

3

编程助�...pt.dll

windows7-x64

3

编程助�...pt.dll

windows10-2004-x64

3

编程助�...et.dll

windows7-x64

3

编程助�...et.dll

windows10-2004-x64

3

编程助�...xt.dll

windows7-x64

3

编程助�...xt.dll

windows10-2004-x64

3

编程助�...t2.dll

windows7-x64

3

编程助�...t2.dll

windows10-2004-x64

3

编程助�...t3.dll

windows7-x64

3

编程助�...t3.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    afb2a40990d9016331ee4fd44f7191f9_JaffaCakes118

  • Size

    3.2MB

  • MD5

    afb2a40990d9016331ee4fd44f7191f9

  • SHA1

    f41dceebbc1d1015d4d51b483e9c10d41cef78cf

  • SHA256

    2764ea0e72bef2808211dc063fa8bc450ce17b6b3520abf2bafd14fde87d5eab

  • SHA512

    2ea443584f591ceeb1ae81ad1ca2270114e86d0ffc108b3823037ffe468600c1b6af17590aab46d571b36205088fac3f4d294a7bd6bade95fc8903f297fe9447

  • SSDEEP

    98304:DWG3JEohfHtsizCFveWz0jJiEYM5cU8FCRoo2rlPB/Oea:DWG3JjhF5zCFeTr5c3F2oJrD/ra

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • afb2a40990d9016331ee4fd44f7191f9_JaffaCakes118
    .rar
  • 编程助手2.5/DialogEx.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 编程助手2.5/ExtMenu.fnr
    .dll windows:4 windows x86 arch:x86

    472b95d04dba8e53958d2b826a76dce5


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/IE.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 编程助手2.5/PBShell.fne
    .dll windows:1 windows x86 arch:x86

    2027b75fdbfe67caf12adc5d5f0ddf0c


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/UPX.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/calc.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/commobj.fne
    .dll windows:4 windows x86 arch:x86

    224f5ab43692f06b61f1b90ff21c22b1


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/data.edt
  • 编程助手2.5/data.rtb
  • 编程助手2.5/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    427eb39584a9f7cdf9555afee9d5ccff


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/eMMedia.fne
    .dll regsvr32 windows:4 windows x86 arch:x86

    e9160feab0c8a3501d3b8020114acd48


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/eNetIntercept.fne
    .dll windows:4 windows x86 arch:x86

    2c2e7ec23cbadb8f2e11e68a3ee31acd


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/edroptarget.fne
    .dll windows:4 windows x86 arch:x86

    686595f11e755695687c7a551e28d90b


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/iext3.fne
    .dll windows:4 windows x86 arch:x86

    e16cd9ed3233064536d99cf6794183fb


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/iext5.fne
    .dll windows:4 windows x86 arch:x86

    33bdca2e2ea9de9ba47bcab3a7a7011f


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/int.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 编程助手2.5/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    70aa7e4af9351a4a11163b4edc29b626


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/reg.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/shdocvw.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6a7c629739ff264cef710604b9d77a86


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/shell.fne
    .dll windows:4 windows x86 arch:x86

    5c5d113b6e7adb5168ea190de24145c0


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    83c5a1bfd08221cfa9c880c04f59a4e7


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/spec.fne
    .dll windows:4 windows x86 arch:x86

    0b8b5f9848c670c631fa790d1a1a90e5


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/type.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 编程助手2.5/update/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/update/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/update/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    70aa7e4af9351a4a11163b4edc29b626


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/update/update.ccc
  • 编程助手2.5/update/update.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 编程助手2.5/update/update.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 编程助手2.5/update/ver.dat
  • 编程助手2.5/编程助手2.5 正式版.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 编程助手2.5/配置.ini