Overview

overview

3

Static

static

3

育儿堂�...ay.exe

windows7-x64

3

育儿堂�...ay.exe

windows10-2004-x64

3

育儿堂�...n3.swf

windows7-x64

3

育儿堂�...n3.swf

windows10-2004-x64

3

育儿堂�...��.url

windows7-x64

1

育儿堂�...��.url

windows10-2004-x64

1

育儿堂�...ld.exe

windows7-x64

3

育儿堂�...ld.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee9cefdf42a8de7455c47a4205109d38_JaffaCakes118

  • Size

    1.6MB

  • MD5

    ee9cefdf42a8de7455c47a4205109d38

  • SHA1

    0d75b060448d0170b388f6f97566136f57a42241

  • SHA256

    ee29c0a56261ad71157b79709046aa022b77af5cff9cca61164b03c7f05b60b2

  • SHA512

    a932241cc27fa48fe2975b655170cb240092afd7f1d384f6dfc4b44d56d9f5721fd2375df3da8bc7553ee8344317303988b4ff99e748ec21abd0958997bac7fd

  • SSDEEP

    24576:2UWoKSIbfS23h3q89R10YAAcESvjfyOfa00AIh2KKSeBg7E3xHfFhIGEEQZCTPER:2R7bfdBq89RXAVpfVa3UHg7E3VIqI7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ee9cefdf42a8de7455c47a4205109d38_JaffaCakes118
    .rar
  • 绿色版使用说明.txt
  • 育儿堂儿童教育软件绿色版/Child.dat
  • 育儿堂儿童教育软件绿色版/ChildTray.exe
    .exe windows:4 windows x86 arch:x86

    9df7337c4ee7601143a768bf6f9905f1


    Headers

    Imports

    Sections

  • 育儿堂儿童教育软件绿色版/skins/load.swf
  • 育儿堂儿童教育软件绿色版/skins/main3.swf
  • 育儿堂儿童教育软件绿色版/新云软件.url
    .url
  • 育儿堂儿童教育软件绿色版/育儿堂教育Child.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections