Overview

overview

7

Static

static

7

按键娃�...ec.dll

windows7-x64

3

按键娃�...ec.dll

windows10-2004-x64

3

按键娃�...SM.dll

windows7-x64

7

按键娃�...SM.dll

windows10-2004-x64

7

按键娃�...nd.dll

windows7-x64

3

按键娃�...nd.dll

windows10-2004-x64

3

按键娃�...PU.dll

windows7-x64

7

按键娃�...PU.dll

windows10-2004-x64

7

按键娃�...re.dll

windows7-x64

7

按键娃�...re.dll

windows10-2004-x64

7

按键娃�...ug.dll

windows7-x64

7

按键娃�...ug.dll

windows10-2004-x64

7

按键娃�...MA.dll

windows7-x64

3

按键娃�...MA.dll

windows10-2004-x64

3

按键娃�...ib.dll

windows7-x64

7

按键娃�...ib.dll

windows10-2004-x64

7

按键娃�...re.dll

windows7-x64

7

按键娃�...re.dll

windows10-2004-x64

7

按键娃�...et.dll

windows7-x64

7

按键娃�...et.dll

windows10-2004-x64

7

按键娃�...me.dll

windows7-x64

7

按键娃�...me.dll

windows10-2004-x64

7

按键娃�...ow.dll

windows7-x64

7

按键娃�...ow.dll

windows10-2004-x64

7

按键娃�...ta.dll

windows7-x64

3

按键娃�...ta.dll

windows10-2004-x64

3

按键娃�...ai.dll

windows7-x64

3

按键娃�...ai.dll

windows10-2004-x64

3

按键娃�...et.dll

windows7-x64

7

按键娃�...et.dll

windows10-2004-x64

7

按键娃�...st.dll

windows7-x64

3

按键娃�...st.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfc28a7d0df6fd784588a194679a2095_JaffaCakes118

  • Size

    3.3MB

  • MD5

    dfc28a7d0df6fd784588a194679a2095

  • SHA1

    8e77d45668c863dc506e6b6fd806365b1458cd68

  • SHA256

    aea4f56a20f9d6ece05f6735dfd70ce294b29b7dfa099cb88c67a497c74a52a8

  • SHA512

    14711e0a8a1b7a2587814ccf80b27f269fc745477125025c7fec26c7e3c4b1c5277297fe9165ee53d98dd2603af445da8191d66ab60fa4385bdcf0514dddfdc4

  • SSDEEP

    98304:PZUTnOaW6Nwc3MU91hi0Fab/d0kwOrxdHNTVg:PZUDpjD3hi0Fab+kjrxdHNTVg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 12 IoCs

    Detects file using ACProtect software.

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • dfc28a7d0df6fd784588a194679a2095_JaffaCakes118
    .rar
  • 按键娃娃/DLLKeyRec.dll
    .dll windows:5 windows x86 arch:x86

    740fc9cb5d1a2d912ad3a3da66bda91f


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/KeyWords.ini
  • 按键娃娃/MainDll/ASM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/BackGround.dll
    .dll windows:5 windows x86 arch:x86

    6015cbf838a1bd6620c00bf8f0b5c01a


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/MainDll/CPU.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/DLLPicture.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/Debug.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/LZMA.dll
    .dll windows:5 windows x86 arch:x86

    07aee7b975914d59648678bb86b772d1


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/MainDll/Lib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/ProPicture.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/Socket.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/Time.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/MainDll/Window.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/Picture/new.bmp
  • 按键娃娃/Plugin/Data.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a080576c3ed14aa9f17960545b7614e9


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/Plugin/KouDai.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a080576c3ed14aa9f17960545b7614e9


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/Plugin/Net.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/Plugin/Test.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    818255744a627674e9d28fc17f40d9e4


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/Plugin/wulin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/Script/GUI/Check.txt
  • 按键娃娃/Script/GUI/ComboBox.txt
  • 按键娃娃/Script/GUI/Edit.txt
  • 按键娃娃/Script/GUI/ListBox.txt
  • 按键娃娃/Script/GUI/Simple.txt
  • 按键娃娃/Script/VBScript/文件夹操作.txt
    .vbs
  • 按键娃娃/Script/VBScript/文件操作.txt
    .vbs
  • 按键娃娃/Script/VBScript/随机数.txt
  • 按键娃娃/Script/右键点我/鼠标右键点我.txt
  • 按键娃娃/Script/后台发送按键.txt
  • 按键娃娃/Script/圆形渐开线.txt
  • 按键娃娃/Script/基本命令/定时器.txt
  • 按键娃娃/Script/基本命令/延时.txt
  • 按键娃娃/Script/基本命令/等待按键.txt
  • 按键娃娃/Script/基本命令/蜂鸣.txt
  • 按键娃娃/Script/基本命令/输出文字.txt
  • 按键娃娃/Script/娃娃插件/匹配查图.txt
  • 按键娃娃/Script/娃娃插件/匹配查色.txt
  • 按键娃娃/Script/娃娃插件/后台按下A键.txt
  • 按键娃娃/Script/娃娃插件/按下A键.txt
  • 按键娃娃/Script/娃娃插件/按下组合键.txt
  • 按键娃娃/Script/娃娃插件/获得当前窗口大小.txt
  • 按键娃娃/Script/娃娃插件/调用MessageBoxA.txt
  • 按键娃娃/Script/拓展插件/下载文件.txt
    .vbs
  • 按键娃娃/Script/按键娃娃自我介绍.txt
  • 按键娃娃/Script/插件制作.txt
  • 按键娃娃/Script/武林外传/简易打手.txt
    .vbs
  • 按键娃娃/Script/汇编.txt
  • 按键娃娃/Script/自定义变量.txt
  • 按键娃娃/Script/音乐.txt
  • 按键娃娃/Script/鼠标连点.txt
  • 按键娃娃/ScriptEngine.dll
    .dll windows:5 windows x86 arch:x86

    a4bd102c42e8b9f014f47bcd00f20f72


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/SkinMagic.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 按键娃娃/SourceCode/Lib.vbs
    .vbs
  • 按键娃娃/Tool/FD.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 按键娃娃/Tool/Make.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 按键娃娃/Tool/PE文件查看器.exe
    .exe windows:4 windows x86 arch:x86

    d70aeeb571bf98c19c5f5072835b6ef1


    Headers

    Imports

    Sections

  • 按键娃娃/WinIo.dll
    .dll windows:4 windows x86 arch:x86

    bd0cb83018d965564edc313222cd808a


    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/WinIo.sys
    .sys windows:4 windows x86 arch:x86

    172b54da983eaa27abf08d8ed525b840


    Headers

    Imports

    Sections

  • 按键娃娃/dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    ad470527ba4cec4e16753a0df4637e75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 按键娃娃/help/help.chm
    .chm
  • 按键娃娃/install.log
  • 按键娃娃/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 按键娃娃/按键娃娃.exe
    .exe windows:5 windows x86 arch:x86

    26d437b4ddaeb910e6144e3c5c94fe20


    Headers

    Imports

    Sections

  • 按键娃娃/新云软件.url
    .url
  • 按键娃娃/更新历史.txt
  • 按键娃娃/设置.ini
  • 按键娃娃/驱动/ReadMe.txt
  • 按键娃娃/驱动/Setup.exe
    .exe windows:5 windows x86 arch:x86

    5430a8bb5d9fa1717c32cbe55fa056c5


    Headers

    Imports

    Sections

  • 按键娃娃/驱动/WAWAKeyBoard.sys
    .sys windows:5 windows x86 arch:x86

    065ba44ca5e04f5848ce67c6a3e825d1


    Headers

    Imports

    Sections

  • 按键娃娃/驱动/卸载驱动.bat
  • 按键娃娃/驱动/安装驱动.bat