General

  • Target

    c23eb1ef64f203d7f5bd100b834abcf7_JaffaCakes118

  • Size

    2.7MB

  • MD5

    c23eb1ef64f203d7f5bd100b834abcf7

  • SHA1

    a6d837cc964caaa81bebcac16a954b0d2780a996

  • SHA256

    5ff020d91f8e742f50c78c6662892d7401f331159158e68399be915719df247b

  • SHA512

    dc52826c8b11b0f5da7c2011aec5557cb95e6988a0308309595f30298a783f1e51336fefee4bd4c45872e81ac8f8d157bbf9f2712a9231673b4789cdfb9ae149

  • SSDEEP

    49152:x1UYeXvd+VYa2oeXPrIMoMWRJUsXXPiSwPEpn53uCmBLkLbCgsx45Q9WmRNlV3CS:ol+VYkCP3GvXaHGXGg129TRPV37kgPR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • c23eb1ef64f203d7f5bd100b834abcf7_JaffaCakes118
    .rar
  • wycqzsfz/使用说明.txt
  • wycqzsfz/武易传奇战神辅助V8.5/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wycqzsfz/武易传奇战神辅助V8.5/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wycqzsfz/武易传奇战神辅助V8.5/hl.bmp
  • wycqzsfz/武易传奇战神辅助V8.5/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Sections

  • wycqzsfz/武易传奇战神辅助V8.5/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Sections

  • wycqzsfz/武易传奇战神辅助V8.5/lj.bmp
  • wycqzsfz/武易传奇战神辅助V8.5/wyzk.txt
  • wycqzsfz/武易传奇战神辅助V8.5/引怪.txt
  • wycqzsfz/武易传奇战神辅助V8.5/战士多点脚本.txt
  • wycqzsfz/武易传奇战神辅助V8.5/报毒如何处理.txt
  • wycqzsfz/武易传奇战神辅助V8.5/武易传奇战神辅助v8.5.exe
    .exe windows:4 windows x86 arch:x86

    e65827c0222e5db0c74abf4e20fdd021


    Headers

    Imports

    Sections

  • wycqzsfz/绿软基地.url
    .url