Overview

overview

3

Static

static

3

NBClose.exe

windows7-x64

3

NBClose.exe

windows10-2004-x64

3

Network.exe

windows7-x64

3

Network.exe

windows10-2004-x64

3

Protect.dll

windows7-x64

3

Protect.dll

windows10-2004-x64

3

Protect.dll

windows7-x64

3

Protect.dll

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    da6a73698a59a6815897fc0c3b308474_JaffaCakes118

  • Size

    309KB

  • MD5

    da6a73698a59a6815897fc0c3b308474

  • SHA1

    b5a325f1b1c269c08095d3c20e75167fe16dbfa1

  • SHA256

    99271f6fadc669e249996056a227f9f71753acbc74b4ae87cb3ba12eee41f74b

  • SHA512

    098000e15098736517797a5a4924f97de30bb52f08f4743276c5a51c52ecf307f2338d397d27c63cc0da00eaf0a92517902a39d56fce929a54b13d6569848bc0

  • SSDEEP

    6144:AHX8tn4ZIC3o+EcLM83imU2uk/L0YaVjw17es:ksxlSLMIimYeUjw17X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • da6a73698a59a6815897fc0c3b308474_JaffaCakes118
    .rar
  • NBClose.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NBClose.txt
  • Network.run
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Network.str
  • Protect.run
    .dll windows:4 windows x86 arch:x86

    00a0f7a6ca7396bfc24edbf56828b816


    Headers

    Imports

    Exports

    Sections

  • Protect.str
    .dll windows:4 windows x86 arch:x86

    8162d6ac7aec561e856bde809c724701


    Headers

    Imports

    Exports

    Sections

  • 功能使用说明(必看).txt
  • 新云软件.url
    .url