Overview

overview

7

Static

static

7

玫瑰粉�...ad.dll

windows7-x64

3

玫瑰粉�...ad.dll

windows10-2004-x64

3

玫瑰粉�...ew.dll

windows7-x64

3

玫瑰粉�...ew.dll

windows10-2004-x64

3

玫瑰粉�...EL.dll

windows7-x64

7

玫瑰粉�...EL.dll

windows10-2004-x64

7

玫瑰粉�...ll.dll

windows7-x64

3

玫瑰粉�...ll.dll

windows10-2004-x64

3

玫瑰粉�...��.dll

windows7-x64

3

玫瑰粉�...��.dll

windows10-2004-x64

3

玫瑰粉粉/dp1.dll

windows7-x64

3

玫瑰粉粉/dp1.dll

windows10-2004-x64

3

玫瑰粉�...nv.dll

windows7-x64

3

玫瑰粉�...nv.dll

windows10-2004-x64

3

玫瑰粉粉/iext.dll

windows7-x64

3

玫瑰粉粉/iext.dll

windows10-2004-x64

3

玫瑰粉粉/json.dll

windows7-x64

3

玫瑰粉粉/json.dll

windows10-2004-x64

3

玫瑰粉�...ln.dll

windows7-x64

3

玫瑰粉�...ln.dll

windows10-2004-x64

3

玫瑰粉�...pt.dll

windows7-x64

3

玫瑰粉�...pt.dll

windows10-2004-x64

3

玫瑰粉�...ll.dll

windows7-x64

3

玫瑰粉�...ll.dll

windows10-2004-x64

3

玫瑰粉粉/spec.dll

windows7-x64

3

玫瑰粉粉/spec.dll

windows10-2004-x64

3

玫瑰粉�...��.exe

windows7-x64

3

玫瑰粉�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6dd6a7a830622653fe2e4d11dc77fda_JaffaCakes118

  • Size

    1.4MB

  • MD5

    b6dd6a7a830622653fe2e4d11dc77fda

  • SHA1

    ceba03444f7f503663bf694b131e555ccf5a958b

  • SHA256

    3c477e9b8374876999829d53ff4d4fa53de2e1a1b287c16d9c1c4e17fddf3f4f

  • SHA512

    7e543ab314af9bba3f4b4a6113ac9a55a26792c4b9d3dcf5da760191affac1f90df9eb3b85e91ed9cfc9377606c8a9fbacfa8c568a1ef228f24f8e12c135c383

  • SSDEEP

    24576:3WqAHUkUbii0lFFf/MFU9nTi1E/0MjSP6vVT7dzifMPRa4fFwlyR4tH:gUkUbLSPUFU9mC/JjJvVT7dzikPcWUyg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • b6dd6a7a830622653fe2e4d11dc77fda_JaffaCakes118
    .rar
  • 玫瑰粉粉/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/SkinH.She
  • 玫瑰粉粉/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 玫瑰粉粉/WaterDll.dll
    .dll windows:4 windows x86 arch:x86

    17831cd6d91ae3f26684dc05c2bd46a4


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/WebBrowser-中文.fne
    .dll windows:4 windows x86 arch:x86

    d6c10922930d9f368d6de12c4ab43426


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/iconv.fne
    .dll windows:4 windows x86 arch:x86

    786b7bd5b5d9aef58b0ae2c290907587


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/json.fnr
    .dll windows:4 windows x86 arch:x86

    9d8aad1d5894a081f08aa2899109d45e


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/script.fne
    .dll windows:4 windows x86 arch:x86

    71874d157b7e276e2c88d322a253db69


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 玫瑰粉粉/主体Logo.Bmp
  • 玫瑰粉粉/启动Logo.Bmp
  • 玫瑰粉粉/玫瑰粉粉.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections