Overview

overview

7

Static

static

7

Processjud...er.dll

windows7-x64

3

Processjud...er.dll

windows10-2004-x64

3

Processjud...ck.dll

windows7-x64

3

Processjud...ck.dll

windows10-2004-x64

3

Processjud...ck.sys

windows7-x64

1

Processjud...ck.sys

windows10-2004-x64

1

Processjud...ta.dll

windows7-x64

1

Processjud...ta.dll

windows10-2004-x64

1

Processjud...ta.dll

windows7-x64

1

Processjud...ta.dll

windows10-2004-x64

1

Processjud...ct.dll

windows7-x64

3

Processjud...ct.dll

windows10-2004-x64

3

Processjud...ps.dll

windows7-x64

1

Processjud...ps.dll

windows10-2004-x64

1

Processjud...ta.dll

windows7-x64

1

Processjud...ta.dll

windows10-2004-x64

1

Processjud...pi.dll

windows7-x64

3

Processjud...pi.dll

windows10-2004-x64

3

Processjud...ct.exe

windows7-x64

1

Processjud...ct.exe

windows10-2004-x64

3

Processjud...er.exe

windows7-x64

3

Processjud...er.exe

windows10-2004-x64

3

Processjud...fo.exe

windows7-x64

3

Processjud...fo.exe

windows10-2004-x64

3

Processjud...er.exe

windows7-x64

7

Processjud...er.exe

windows10-2004-x64

7

Processjud...ng.exe

windows7-x64

3

Processjud...ng.exe

windows10-2004-x64

3

Processjud...ry.dll

windows7-x64

1

Processjud...ry.dll

windows10-2004-x64

1

Processjud...��.exe

windows7-x64

3

Processjud...��.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9fd52a152b6f41af66c1e15b9944aab_JaffaCakes118

  • Size

    2.0MB

  • MD5

    d9fd52a152b6f41af66c1e15b9944aab

  • SHA1

    edc8e818399cd0ef3fc500c4cabe16fc8cd57460

  • SHA256

    230751a1f251d1a0006923a3c11620570f86251a578cd04d4b27e6eb507750a7

  • SHA512

    b1db291024da0e050f8b3bc69db7d8a7f32bd0bca71960fa284814070027cab18f42d4dbefab244ff7aca1224cb0cb52132b30fc4babe31eb302774273242bac

  • SSDEEP

    49152:mpXzEEZdt6VDcRylYe2cL3DkQeFX0cOruLWo7AJYa7uhGGpc:mpXAIdt6V+ncL3DkQSXDOruaVJYouhG9

Score
7/10
upxaspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • d9fd52a152b6f41af66c1e15b9944aab_JaffaCakes118
    .rar
  • Processjudger/进程执法官2.5破解版/IPSearcher.dll
    .dll windows:4 windows x86 arch:x86

    93b974b7813ab8e5b1fe659fe5089a92


    Headers

    Imports

    Exports

    Sections

  • Processjudger/进程执法官2.5破解版/KProcCheck.dll
    .dll windows:4 windows x86 arch:x86

    dc75b80d7e38888db16c36f639771028


    Headers

    Imports

    Exports

    Sections

  • Processjudger/进程执法官2.5破解版/KProcCheck.sys
    .sys windows:5 windows x86 arch:x86

    7425a9d8d3dc83be8e11c54691286c9e


    Headers

    Imports

    Sections

  • Processjudger/进程执法官2.5破解版/ModuleData.dll
  • Processjudger/进程执法官2.5破解版/PJClock.rmd
  • Processjudger/进程执法官2.5破解版/PJudger.ini
  • Processjudger/进程执法官2.5破解版/ProcessData.dll
  • Processjudger/进程执法官2.5破解版/ProcessProtect.dll
    .dll windows:4 windows x86 arch:x86

    b28859720d5d7eeef96bd9152a4707e6


    Headers

    Imports

    Exports

    Sections

  • Processjudger/进程执法官2.5破解版/Projgtips.dll
  • Processjudger/进程执法官2.5破解版/ServiceData.dll
  • Processjudger/进程执法官2.5破解版/psapi.dll
    .dll windows:5 windows x86 arch:x86

    a5329a3aa51dc5375c9f671bd584f453


    Headers

    Imports

    Exports

    Sections

  • Processjudger/进程执法官2.5破解版/tools/PJProtect.exe
    .exe windows:4 windows x86 arch:x86

    a699de233c8d4d23cfc0b8da026c0edf


    Headers

    Imports

    Sections

  • Processjudger/进程执法官2.5破解版/tools/PJUpdater.exe
    .exe windows:4 windows x86 arch:x86

    532ef250a014bac53a1fef024f863713


    Headers

    Imports

    Sections

  • Processjudger/进程执法官2.5破解版/tools/ProcFindInfo.exe
    .exe windows:4 windows x86 arch:x86

    e280de6e261f71f423658997134c6d92


    Headers

    Imports

    Sections

  • Processjudger/进程执法官2.5破解版/tools/ProcessDB.mdb
  • Processjudger/进程执法官2.5破解版/tools/StartUpManager.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Processjudger/进程执法官2.5破解版/tools/WinPing.exe
    .exe windows:4 windows x86 arch:x86

    5be7f1a4bce235912cec1c0e72925b00


    Headers

    Imports

    Sections

  • Processjudger/进程执法官2.5破解版/tools/showallfile.reg
  • Processjudger/进程执法官2.5破解版/wry.dll
  • Processjudger/进程执法官2.5破解版/前程似锦破解版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Processjudger/进程执法官2.5破解版/进程执法官.CHM
    .chm