Overview

overview

6

Static

static

3

hjzkz/eAPI.dll

windows7-x64

3

hjzkz/eAPI.dll

windows10-2004-x64

3

hjzkz/eDB.dll

windows7-x64

3

hjzkz/eDB.dll

windows10-2004-x64

3

hjzkz/hjzkz.exe

windows7-x64

6

hjzkz/hjzkz.exe

windows10-2004-x64

6

hjzkz/iext.dll

windows7-x64

3

hjzkz/iext.dll

windows10-2004-x64

3

hjzkz/iext3.dll

windows7-x64

3

hjzkz/iext3.dll

windows10-2004-x64

3

hjzkz/jedi.dll

windows7-x64

3

hjzkz/jedi.dll

windows10-2004-x64

3

hjzkz/krnln.dll

windows7-x64

3

hjzkz/krnln.dll

windows10-2004-x64

3

hjzkz/shell.dll

windows7-x64

3

hjzkz/shell.dll

windows10-2004-x64

3

hjzkz/shellEx.dll

windows7-x64

3

hjzkz/shellEx.dll

windows10-2004-x64

3

hjzkz/spec.dll

windows7-x64

3

hjzkz/spec.dll

windows10-2004-x64

3

hjzkz/xplib.dll

windows7-x64

3

hjzkz/xplib.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf4a9689d4dc1c1019993d445ec8ee20_JaffaCakes118

  • Size

    1.4MB

  • MD5

    cf4a9689d4dc1c1019993d445ec8ee20

  • SHA1

    904b3bd902cee909f578eb0edd79a35b232f254b

  • SHA256

    f76e256984d189034157bbf2eec847c3f8c99d45b2419f60024e0daee28ddadf

  • SHA512

    da7e1245c2626812b1b66a805b53b15f2a4c5de9ec4387d2dcc960134e172107bfdb701e1679da028ecd1ff67e13edd0ab458a3e6edd3e19f329e0113e54abe6

  • SSDEEP

    24576:XDM2V99/PejAlvYAJeByHgjQIkysFCxIuwJm84lFMmpF17uh6uI+FKBmuw6oO8+M:T/r9Q3AJxA3/2cosStFKTw6ob+M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • cf4a9689d4dc1c1019993d445ec8ee20_JaffaCakes118
    .rar
  • hjzkz/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • hjzkz/eDB.fne
    .dll windows:4 windows x86 arch:x86

    f857d1f0d4acc848a6aef5d66ff25e1a


    Headers

    Imports

    Exports

    Sections

  • hjzkz/hjzkz.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • hjzkz/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • hjzkz/iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • hjzkz/jedi.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hjzkz/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • hjzkz/setup.ini
  • hjzkz/setup.mdb
  • hjzkz/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • hjzkz/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    57d8c267f92579f0eedd02f56bfbc0c0


    Headers

    Imports

    Exports

    Sections

  • hjzkz/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • hjzkz/sysj.edb
  • hjzkz/xplib.fne
    .dll windows:4 windows x86 arch:x86

    9fef9bf9acc89e1f2c179276720200a6


    Headers

    Imports

    Exports

    Sections

  • hjzkz/程序说明.txt