Overview

overview

3

Static

static

3

幸运28�...dit.js

windows7-x64

3

幸运28�...dit.js

windows10-2004-x64

3

幸运28�...sql.js

windows7-x64

3

幸运28�...sql.js

windows10-2004-x64

3

幸运28�...dex.js

windows7-x64

3

幸运28�...dex.js

windows10-2004-x64

3

幸运28�...ert.js

windows7-x64

3

幸运28�...ert.js

windows10-2004-x64

3

幸运28�...��.exe

windows7-x64

3

幸运28�...��.exe

windows10-2004-x64

3

幸运28�...��.url

windows7-x64

1

幸运28�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2bb55a6ce8c5236dc4c6685ca200cd8_JaffaCakes118

  • Size

    647KB

  • MD5

    b2bb55a6ce8c5236dc4c6685ca200cd8

  • SHA1

    ef72f637fe50eb8bfac5771b05ee53c8781716b7

  • SHA256

    e7ded3264191831084bdcda3bb7565714b1a4ef9529af4e47fba036571a20d78

  • SHA512

    92df9ed21d65f89f1800c28037fc4c9af592fd649b4c59e708fa7b6c5c9ac953a6e19ea309097bc78a9bbeff7c3794319b75b5c235722cea07780cbee72d40d6

  • SSDEEP

    12288:NaMtlhT3BAsacUWR6BUbIRL/KAG35rqrBmH54uweTyBmjm1TPMHDsZ1xol:RX3JYWHyTL80rBelwbUm1TPMjsBol

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2bb55a6ce8c5236dc4c6685ca200cd8_JaffaCakes118
    .rar
  • 幸运28程序/bet.php
  • 幸运28程序/edit.php
    .js
  • 幸运28程序/foot.php
  • 幸运28程序/images/Thumbs.db
  • 幸运28程序/images/logo.jpg
    .jpg
  • 幸运28程序/images/shuiyin.css
  • 幸运28程序/images/xy28_bg.gif
    .gif
  • 幸运28程序/inc/config.php
  • 幸运28程序/inc/mysql.php
    .js
  • 幸运28程序/index.php
    .js
  • 幸运28程序/insert.php
    .js
  • 幸运28程序/login.php
  • 幸运28程序/my.php
  • 幸运28程序/read.php
  • 幸运28程序/reg.php
  • 幸运28程序/result.php
  • 幸运28程序/shuiyin.sql
  • 幸运28程序/submit.php
  • 幸运28程序/top.php
  • 幸运28程序/trend.php
  • 幸运28程序/开奖程序.exe
    .exe windows:4 windows x86 arch:x86

    40c317f616a2515549572a58de47c6e3


    Headers

    Imports

    Sections

  • 幸运28程序/新云软件.url
    .url