Overview

overview

6

Static

static

3

流萤V2.3...nt.exe

windows7-x64

3

流萤V2.3...nt.exe

windows10-2004-x64

3

流萤V2.3...er.exe

windows7-x64

3

流萤V2.3...er.exe

windows10-2004-x64

3

流萤V2.3...xe.exe

windows7-x64

6

流萤V2.3...xe.exe

windows10-2004-x64

6

流萤V2.3...st.dll

windows7-x64

3

流萤V2.3...st.dll

windows10-2004-x64

3

流萤V2.3...LP.chm

windows7-x64

1

流萤V2.3...LP.chm

windows10-2004-x64

1

流萤V2.3...at.exe

windows7-x64

3

流萤V2.3...at.exe

windows10-2004-x64

3

流萤V2.3...te.exe

windows7-x64

3

流萤V2.3...te.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfcf141dd7f86aa19226a4518e770523_JaffaCakes118

  • Size

    3.5MB

  • MD5

    dfcf141dd7f86aa19226a4518e770523

  • SHA1

    4073b900dc6de662c604fe735a40aa7f64dc40cb

  • SHA256

    f93b47bfbf7c50c1612476bb7cb0268b19a5b0acf1b35d9b1ea44a25fe0457c1

  • SHA512

    bb6d5928710b278745d6ec85d64fd067edcca94d4e72acdc05809d9ec398e1436934f94cdcf9e0aad95e5f11d2aa51d6c68772a7277f3933c0ba6dd106d8e5c5

  • SSDEEP

    98304:g4wuXrgXaWdRti+NdecXN3WJd5XmB4CKYMWm:g4wiQRr1jYJvXmBv9m

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • dfcf141dd7f86aa19226a4518e770523_JaffaCakes118
    .rar
  • 流萤V2.3Beta3发布版/Client.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 流萤V2.3Beta3发布版/Date.ini
  • 流萤V2.3Beta3发布版/Date/EXEServer.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 流萤V2.3Beta3发布版/Date/MinExe.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 流萤V2.3Beta3发布版/Date/ServerList.dat
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 流萤V2.3Beta3发布版/HELP.CHM
    .chm
  • 流萤V2.3Beta3发布版/QQWry.Dat
  • 流萤V2.3Beta3发布版/ServerCreat.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 流萤V2.3Beta3发布版/ServerHostDate.ini
  • 流萤V2.3Beta3发布版/Update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 流萤V2.3Beta3发布版/whatsnew.txt
  • 流萤V2.3Beta3发布版/下载说明.htm
    .html .js polyglot