Overview

overview

7

Static

static

3

Rockey2加...id.dll

windows7-x64

3

Rockey2加...id.dll

windows10-2004-x64

3

Rockey4ND�...id.dll

windows7-x64

3

Rockey4ND�...id.dll

windows10-2004-x64

3

Rockey5加...32.dll

windows7-x64

3

Rockey5加...32.dll

windows10-2004-x64

3

Rockey5加...y5.dll

windows7-x64

3

Rockey5加...y5.dll

windows10-2004-x64

3

Rockey6加...2u.dll

windows7-x64

3

Rockey6加...2u.dll

windows10-2004-x64

3

Rockey6加...y6.dll

windows7-x64

3

Rockey6加...y6.dll

windows10-2004-x64

3

世纪龙�...id.dll

windows7-x64

3

世纪龙�...id.dll

windows10-2004-x64

3

世纪龙�...id.dll

windows7-x64

3

世纪龙�...id.dll

windows10-2004-x64

3

世纪龙�...id.dll

windows7-x64

3

世纪龙�...id.dll

windows10-2004-x64

3

世纪龙�...id.dll

windows7-x64

3

世纪龙�...id.dll

windows10-2004-x64

3

全自动�...ok.dll

windows7-x64

3

全自动�...ok.dll

windows10-2004-x64

3

全自动�...pe.exe

windows7-x64

5

全自动�...pe.exe

windows10-2004-x64

5

全自动�...pk.dll

windows7-x64

7

全自动�...pk.dll

windows10-2004-x64

7

坚石诚�...id.dll

windows7-x64

3

坚石诚�...id.dll

windows10-2004-x64

3

坚石诚�...id.dll

windows7-x64

3

坚石诚�...id.dll

windows10-2004-x64

3

坚石诚�...id.dll

windows7-x64

3

坚石诚�...id.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    eba7baca16c0ebcaa2c64fd2311eeba9_JaffaCakes118

  • Size

    2.8MB

  • MD5

    eba7baca16c0ebcaa2c64fd2311eeba9

  • SHA1

    6911785ac989fd74387717a3174c914ffbf6ae33

  • SHA256

    dea8a9f099b4e0211b79e7fa99694f68c1fb072e5bc80e617d18e7dd2a6eb853

  • SHA512

    3d73c3835b551cab35ffb91038fd964230832bbc2b9c3b1a1c6d2a9b139b98d60946238cbd9b7b8c31c083d84e2c217b3d8c06e12813c917d12aa363000b5061

  • SSDEEP

    49152:HGWD+zjnJu+q+jvv6w02mVARoOikqnty79cTvhKRIYTOq+jplRVOn9RmSib8rOf0:HGg+fnJrXvfrmV2qacTvhQtTYBVOqSim

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • eba7baca16c0ebcaa2c64fd2311eeba9_JaffaCakes118
    .zip
  • Rockey2加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • Rockey4ND加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    843c3b112c24b437d8d313bba1fb9d4c


    Headers

    Imports

    Exports

    Sections

  • Rockey5加密狗数据读取工具/Dic32.dll
    .dll windows:4 windows x86 arch:x86

    55b54bfb3ffba98f9de7f3aa96d3e88f


    Headers

    Imports

    Exports

    Sections

  • Rockey5加密狗数据读取工具/rockey5.dll
    .dll windows:4 windows x86 arch:x86

    9615d02987e8f4b25308998671563026


    Headers

    Imports

    Exports

    Sections

  • Rockey6加密狗数据读取工具/Dic32u.dll
    .dll windows:4 windows x86 arch:x86

    6ef95fb5ed7fed5e415685ae89f53f3b


    Headers

    Imports

    Exports

    Sections

  • Rockey6加密狗数据读取工具/rockey6.dll
    .dll windows:4 windows x86 arch:x86

    e8f31e109a58843bdaa3dea3db73a078


    Headers

    Imports

    Exports

    Sections

  • 世纪龙脉DAM2 型加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 世纪龙脉NOX2型加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 世纪龙脉NOX5型加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 世纪龙脉NOX型加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 全自动加密狗类型型号检测软件/ApiHook.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 全自动加密狗类型型号检测软件/dogtype.exe
    .exe windows:4 windows x86 arch:x86

    764a8215b535d6cf8132d53a8791cc9c


    Headers

    Imports

    Sections

  • 全自动加密狗类型型号检测软件/lpk.dll
    .dll windows:5 windows x86 arch:x86

    00c5fd00087020a0645079ce30f4148b


    Headers

    Imports

    Exports

    Sections

  • 各类加密狗读狗工具使用说明.txt
  • 坚石诚信ET199加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 坚石诚信ET299加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 坚石诚信ET99加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 域天YT699加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 域天YT88加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 域天专业型加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 域天密码型NCL-1加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 域天易用经济型加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 域天简单型加密狗数据读取工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    30a5783bc1b4aafaf784fc59763ad1a4


    Headers

    Imports

    Exports

    Sections

  • 深思洛克S4精锐IV加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 深思洛克iToken s300加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 深思洛克深思III加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 深思洛克精锐E加密狗读狗工具/elitee.dll
    .dll windows:4 windows x86 arch:x86

    fd95decc30d817e05ca4027a6e397626


    Headers

    Imports

    Exports

    Sections

  • 深思洛克精锐E加密狗读狗工具/elitee0.dll
    .dll windows:4 windows x86 arch:x86

    b2adaa8da896f2c7bf8e876156f747ec


    Headers

    Imports

    Exports

    Sections

  • 深思洛克精锐E加密狗读狗工具/深思洛克精锐E加密狗读狗工具.rar
    .rar
  • elitee.dll
    .dll windows:4 windows x86 arch:x86

    fd95decc30d817e05ca4027a6e397626


    Headers

    Imports

    Exports

    Sections

  • elitee0.dll
    .dll windows:4 windows x86 arch:x86

    b2adaa8da896f2c7bf8e876156f747ec


    Headers

    Imports

    Exports

    Sections

  • 深思洛克精锐E加密狗读狗工具/深思洛克精锐E加密狗读狗工具使用说明.txt
  • 深思灵锐 I加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 通用无驱加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections

  • 飞天诚信Rockey 3加密狗读狗工具/Hid.dll
    .dll windows:4 windows x86 arch:x86

    16af42e212260e5bf4eb880d23dfb280


    Headers

    Imports

    Exports

    Sections