Overview

overview

3

Static

static

3

悠树图�...ad.dll

windows7-x64

3

悠树图�...ad.dll

windows10-2004-x64

3

悠树图�...PI.dll

windows7-x64

3

悠树图�...PI.dll

windows10-2004-x64

3

悠树图�...er.dll

windows7-x64

3

悠树图�...er.dll

windows10-2004-x64

3

悠树图�...in.dll

windows7-x64

3

悠树图�...in.dll

windows10-2004-x64

3

悠树图�...et.dll

windows7-x64

3

悠树图�...et.dll

windows10-2004-x64

3

悠树图�...et.dll

windows7-x64

3

悠树图�...et.dll

windows10-2004-x64

3

悠树图�...ln.dll

windows7-x64

3

悠树图�...ln.dll

windows10-2004-x64

3

悠树图�...ll.dll

windows7-x64

3

悠树图�...ll.dll

windows10-2004-x64

3

悠树图�....3.exe

windows7-x64

3

悠树图�....3.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef070825400e5255928248d52c03d2f9_JaffaCakes118

  • Size

    1.0MB

  • MD5

    ef070825400e5255928248d52c03d2f9

  • SHA1

    4bdbd0576c3f4e62dd8506a9b4068654a9ed5f0e

  • SHA256

    c5990fad34613a6b43a707c87ecb5c1979556232f7f9d451d306e0e2c78cb992

  • SHA512

    7a9ff65f168dca981671453ba7cd907b4f935e5fd2663ea3e412cd7ac1f3c3d5e10a6664ff497135cfbe2469866e6ac41e4b8559a89e1cdb24a5d769c222bf19

  • SSDEEP

    24576:F76g6kIboeg3fabi8vLSb/mE+4qQhJnkAY+/OMqyLKwYdlcfunU:QgTIbY3v8vLY/TX3cHGYcfb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • ef070825400e5255928248d52c03d2f9_JaffaCakes118
    .rar
  • 悠树图片格式批量转换工具/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/eImgConverter.fne
    .dll windows:4 windows x86 arch:x86

    7c3633e473ccd3dabfc9db68e587eaad


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/eSkin.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 悠树图片格式批量转换工具/edroptarget.fne
    .dll windows:4 windows x86 arch:x86

    75889273a2d161ac42ddb88c07d5d878


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 悠树图片格式批量转换工具/悠树图片格式批量转换工具 V1.3.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections