Overview

overview

7

Static

static

7

SkinH_EL.dll

windows7-x64

7

SkinH_EL.dll

windows10-2004-x64

7

XGJ.dll

windows7-x64

3

XGJ.dll

windows10-2004-x64

3

data/新云软件.url

windows7-x64

1

data/新云软件.url

windows10-2004-x64

1

网游小管家.exe

windows7-x64

3

网游小管家.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b176abb3cba4c1a9d4053043fb3628b6_JaffaCakes118

  • Size

    769KB

  • MD5

    b176abb3cba4c1a9d4053043fb3628b6

  • SHA1

    1bb0c71e73a55ea11b31b0a30eb2cedf0dc86432

  • SHA256

    1582c4877abf379ed22b3b46a78f18a9c55a8755a87be6606e226e897fd39872

  • SHA512

    f33303e5c26526df42718e29a5dd066081606dd7cac0c47efdfa918fe12fa8fa17a230c4a388934990b46916588f50bbccc74a2ad69659afda972883b33de19a

  • SSDEEP

    24576:x5Q8y0zqYeHdbzGpjVVbkkh0uHh8j0vRT:xq8yNtzApFkaTh/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b176abb3cba4c1a9d4053043fb3628b6_JaffaCakes118
    .rar
  • Images/DuoChengXu.jpg
    .jpg
  • Images/about.jpg
    .jpg
  • Images/movie.gif
    .gif
  • Images/qd.jpg
    .jpg
  • Images/暂无图片.gif
    .gif
  • Images/节日图片.JPG
    .jpg
  • README.TXT
  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • XGJ.dll
    .dll windows:4 windows x86 arch:x86

    48381bc7dbd2e4ad1aee020093272f43


    Headers

    Imports

    Exports

    Sections

  • data/XLT.LT
  • data/XLTDZ.DAT
  • data/main.mdb
  • data/sys.dat
  • data/新云软件.url
    .url
  • skinh.she
  • 网游小管家.exe
    .exe windows:4 windows x86 arch:x86

    3d60e166747a046516256a5d790addd7


    Headers

    Imports

    Sections