Overview

overview

3

Static

static

3

使用说明.html

windows7-x64

3

使用说明.html

windows10-2004-x64

3

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

刷票器_...32.dll

windows7-x64

3

刷票器_...32.dll

windows10-2004-x64

3

刷票器_...ET.dll

windows7-x64

3

刷票器_...ET.dll

windows10-2004-x64

3

刷票器_...60.dll

windows7-x64

3

刷票器_...60.dll

windows10-2004-x64

3

刷票器_...��.exe

windows7-x64

3

刷票器_...��.exe

windows10-2004-x64

3

刷票器_...rw.exe

windows7-x64

3

刷票器_...rw.exe

windows10-2004-x64

3

极速软�...��.url

windows7-x64

1

极速软�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2a040b32285eca15b92027274eb3a07_JaffaCakes118

  • Size

    1.2MB

  • MD5

    c2a040b32285eca15b92027274eb3a07

  • SHA1

    3f504c4e7a0c26a924b39c617fe246b51dec3c57

  • SHA256

    38e7f2262df55cc21f11e822889a4370bc2a0ee6c7c8e8ceca3369059b92e402

  • SHA512

    d2520669d8084db1745fbf6659edfa0367370b6758d8c9118736d88a1127019720167f982a91957d9f94464549cecd0a88e8a0129bd57c8738322d03d43f13b6

  • SSDEEP

    24576:J/L4wPJtmI1XTQzLxhXdJ1FiktT5faXu1leGJ2umiZqQAUbKaWS:JD4Y9jQBhr/dbMU8rQZtAUbKo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • c2a040b32285eca15b92027274eb3a07_JaffaCakes118
    .rar
  • 使用说明.html
  • 使用说明.url
  • 刷票器_5_0_绿色版_Jisuxz.com/Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 刷票器_5_0_绿色版_Jisuxz.com/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 刷票器_5_0_绿色版_Jisuxz.com/Msvbvm60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    479485184984aadb89b6e8cf253117e6


    Headers

    Imports

    Exports

    Sections

  • 刷票器_5_0_绿色版_Jisuxz.com/ShuaPaio 刷票器.exe
    .exe windows:4 windows x86 arch:x86

    ab0ed8f39d39e50ae597b2da061c5416


    Headers

    Imports

    Sections

  • 刷票器_5_0_绿色版_Jisuxz.com/daishuawcrw.exe
    .exe windows:4 windows x86 arch:x86

    e0a0a48ccea430224e369f0c45a8f7d8


    Headers

    Imports

    Sections

  • 刷票器_5_0_绿色版_Jisuxz.com/指令格式列表.txt
  • 极速软件下载.url