Overview

overview

7

Static

static

7

淘宝登�...ta.dll

windows7-x64

7

淘宝登�...ta.dll

windows10-2004-x64

7

淘宝登�...as.dll

windows7-x64

3

淘宝登�...as.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c12884429ce2d7c4f0d344601917c3cd_JaffaCakes118

  • Size

    961KB

  • MD5

    c12884429ce2d7c4f0d344601917c3cd

  • SHA1

    3f76fc01ffe846c1096312c96f08e443782cdaff

  • SHA256

    410f4aa8e2d46450c1518a04848a8a94d5f52ff0161838b23ef84842506df93d

  • SHA512

    04ee327b378aaa3c467d8e28fa23ebe9ee635ad0eb458ee690d3ef985a95afc11f34a25b203f49f7fad257a3de0ab505da9aaf2cb4cdd30c99bb279fd6bd277e

  • SSDEEP

    24576:Mk1qLOnXUGJ7bqZQzosOfVoS/fEzD3puNjbWQ3:X1qqnXH7mKzJ2V9XEzD3p+jL

Score
7/10
upxaspackv2

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c12884429ce2d7c4f0d344601917c3cd_JaffaCakes118
    .rar
  • 淘宝登录密码修改找回软件3.2/jedata.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 淘宝登录密码修改找回软件3.2/peas.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections