Overview

overview

3

Static

static

3

APISpyer.exe

windows7-x64

3

APISpyer.exe

windows10-2004-x64

3

ApiSpy.vbs

windows7-x64

1

ApiSpy.vbs

windows10-2004-x64

1

VB程序太平洋.exe

windows7-x64

3

VB程序太平洋.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc95ebfa589966279c2a34946d06c26b_JaffaCakes118

  • Size

    19KB

  • MD5

    bc95ebfa589966279c2a34946d06c26b

  • SHA1

    e2077168fa291d8cacd0d41e1b824a717addb614

  • SHA256

    b6d9e667bb8f049d2d820176c5e88edbb49f34edf79e6f15349bac3cad0e7bb4

  • SHA512

    39b5cba32f05a1202e0ed6e2ad300150ffd0d08f8591b13466f79114f7c12ae7dc0aab85be4af8869c33479f034c8d04d2b004de695232b853c0a896b4c29254

  • SSDEEP

    384:7e6kjO7JEw4VVoB6E2juRyb4DgIkbQtY8ZuFsI5Mv2Mc:7eLj6P3325cDkQtY8UFr5MOV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bc95ebfa589966279c2a34946d06c26b_JaffaCakes118
    .rar
  • APIChange.frm
  • APIChange.frx
  • APISpyer.DEP
  • APISpyer.PDM
  • APISpyer.exe
    .exe windows:4 windows x86 arch:x86

    6b2b2f1f6ccd827511b7816d18e23acf


    Headers

    Imports

    Sections

  • APISpyer.vbp
  • ApiSpy.frm
    .vbs
  • ApiSpy.frx
  • VB程序太平洋.EXE
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot