Overview

overview

3

Static

static

3

旅馆小�...Fx.dll

windows7-x64

1

旅馆小�...Fx.dll

windows10-2004-x64

1

旅馆小�...ib.dll

windows7-x64

1

旅馆小�...ib.dll

windows10-2004-x64

1

旅馆小�...ib.dll

windows7-x64

1

旅馆小�...ib.dll

windows10-2004-x64

1

旅馆小�...on.dll

windows7-x64

1

旅馆小�...on.dll

windows10-2004-x64

1

旅馆小�...ck.dll

windows7-x64

1

旅馆小�...ck.dll

windows10-2004-x64

1

旅馆小黑/Jint.dll

windows7-x64

1

旅馆小黑/Jint.dll

windows10-2004-x64

1

旅馆小�...ne.exe

windows7-x64

1

旅馆小�...ne.exe

windows10-2004-x64

1

旅馆小�...et.dll

windows7-x64

1

旅馆小�...et.dll

windows10-2004-x64

1

旅馆小�...05.dll

windows7-x64

3

旅馆小�...05.dll

windows10-2004-x64

3

旅馆小�...��.exe

windows7-x64

3

旅馆小�...��.exe

windows10-2004-x64

3

旅馆小�...��.exe

windows7-x64

3

旅馆小�...��.exe

windows10-2004-x64

1

旅馆小�...��.exe

windows7-x64

3

旅馆小�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8d8291609307905e55bb25226d78232_JaffaCakes118

  • Size

    1.2MB

  • MD5

    c8d8291609307905e55bb25226d78232

  • SHA1

    46fd9225f1feb3894ee1938ead4de31eafc780ba

  • SHA256

    35ceba464f1c6a88ab0cfc6a30f4107db5300df47db94663064b988314240ff3

  • SHA512

    3c206966ff72676c46cee0002ee4f5ce476ba743dfc2412312a42ba707f3037217a6bf58517926a485458fd6107e7a787fe48daa46b7debf458c18be8b4916c3

  • SSDEEP

    24576:X4WgprsF7RIKCP8DNb46KPvDHdVjCCaaYd9BpYDbqGSz2XSvkHmNbpU:XSyKKCiKPLdpCdaJOGHivJFU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • c8d8291609307905e55bb25226d78232_JaffaCakes118
    .rar
  • 旅馆小黑/AboutTime.ini
  • 旅馆小黑/FluorineFx.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/Interop.QuartzTypeLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/Jayrock.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/Jayrock.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/UpdateOnline.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 旅馆小黑/allCookie.data
  • 旅馆小黑/config.ini
  • 旅馆小黑/log4net.config
    .xml
  • 旅馆小黑/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 旅馆小黑/skincrafter.net-vs2005.dll
    .dll windows:4 windows x86 arch:x86

    cc59c365bc885f06f0cee2d725f51cae


    Headers

    Imports

    Sections

  • 旅馆小黑/对时软件.exe
    .exe windows:4 windows x86 arch:x86

    fab24e6236b944ad601e2f8dc6827a5c


    Headers

    Imports

    Sections

  • 旅馆小黑/旅馆小黑.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 旅馆小黑/旅馆小黑.exe.config
    .xml
  • 旅馆小黑/运行不了点击这文件.exe
    .exe windows:5 windows x86 arch:x86

    c32bbe9fc4a1294318cc1dd7b4d0eea3


    Headers

    Imports

    Sections