Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

SCV.Select...27.exe

windows7-x64

7

SCV.Select...27.exe

windows10-2004-x64

7

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ch.dll

windows7-x64

3

$PLUGINSDI...ch.dll

windows10-2004-x64

3

EditLocal.dll

windows7-x64

3

EditLocal.dll

windows10-2004-x64

3

InstCC.exe

windows7-x64

7

InstCC.exe

windows10-2004-x64

3

Install.exe

windows7-x64

Install.exe

windows10-2004-x64

Local.dll

windows7-x64

3

Local.dll

windows10-2004-x64

3

Riched20.dll

windows7-x64

3

Riched20.dll

windows10-2004-x64

3

Smackw32.dll

windows7-x64

3

Smackw32.dll

windows10-2004-x64

3

StarCraft.exe

windows7-x64

3

StarCraft.exe

windows10-2004-x64

6

StarEdit.exe

windows7-x64

3

StarEdit.exe

windows10-2004-x64

3

battle.dll

windows7-x64

3

battle.dll

windows10-2004-x64

3

standard.dll

windows7-x64

3

standard.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    eed397c9b6fbf0f3c5afe8874df7a950_JaffaCakes118

  • Size

    12.8MB

  • MD5

    eed397c9b6fbf0f3c5afe8874df7a950

  • SHA1

    977bce447d12c2af8411234d01dd8ca30a3611fb

  • SHA256

    7a740d0514a7c2a913326b0e9d839b638c3fe77e23e5f7dd5aca41ac03d70921

  • SHA512

    033a339af927efe64a9329609611b5e52911e95b5030cccfb39fe6c8c9028e556d6c44264fcec0bbad333a38660ab0803a2105ad9e6b37cbd0dbbdd83c56b3e2

  • SSDEEP

    393216:gNvojlsTxWzTOaGIlzlf6YQ0Eydedgw9+ta:gNwrmaGIzE0vdeH9f

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • eed397c9b6fbf0f3c5afe8874df7a950_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • SCV.Selector.Full.2009.04.27.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/BW.ico
  • $PLUGINSDIR/InstallOptionsEx.dll
    .dll windows:5 windows x86 arch:x86

    23a320559023c8f8e95656c5e186588c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SC.ico
  • $PLUGINSDIR/SCV.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VPatch.dll
    .dll windows:4 windows x86 arch:x86

    308dbf2136b37be830bdd627b8ff3095


    Headers

    Imports

    Exports

    Sections

  • BroodWar.mpq
  • EditLocal.dll
    .dll windows:4 windows x86 arch:x86

    211a1ac2159862c6038f1d798175f2be


    Headers

    Imports

    Sections

  • InstCC.exe
    .exe windows:4 windows x86 arch:x86

    1c0c12beaf5f47bfead3fd73978803ee


    Headers

    Imports

    Sections

  • Install.exe
  • License.txt
  • Local.dll
    .dll windows:4 windows x86 arch:x86

    3c41dd4da68b1f3823a2e4920078a3fa


    Headers

    Imports

    Sections

  • NoCD.pat
  • Readme.cnt
  • Readme.hlp
  • Riched20.dll
    .dll windows:4 windows x86 arch:x86

    f1b8da00f4263487d541e2ea5f136b35


    Headers

    Imports

    Exports

    Sections

  • Smackw32.dll
    .dll windows:4 windows x86 arch:x86

    dc69d2712ae58422570f2c7e9a9c52d4


    Headers

    Imports

    Exports

    Sections

  • StarCraft.exe
    .exe windows:4 windows x86 arch:x86

    21e7ca335e42dff8d656d78e17055324


    Headers

    Imports

    Sections

  • StarEdit.cnt
  • StarEdit.exe
    .exe windows:4 windows x86 arch:x86

    aadbadbe749e7407b10b4c7d07b4ed90


    Headers

    Imports

    Sections

  • StarEdit.hlp
  • battle.snp
    .dll windows:4 windows x86 arch:x86

    845ca901317fdfb13d02b1b9860bf1c4


    Headers

    Imports

    Exports

    Sections

  • noboot.dat
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • standard.snp
    .dll windows:4 windows x86 arch:x86

    f891e2441cddb9a2484c35190eecaf01


    Headers

    Imports

    Exports

    Sections

  • storm.dll
    .dll windows:4 windows x86 arch:x86

    bd09f4b3d8becf73d0ded2381b6112de


    Headers

    Imports

    Sections