General

  • Target

    ef3afcbadcfb8d6dff5a7fa59e3ea471_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ef3afcbadcfb8d6dff5a7fa59e3ea471

  • SHA1

    a82f258ced78bbbdc00627991450def43dae496e

  • SHA256

    8d2641292725c84f8b0a09a47a9b709b872958438278e137a9bdec85952304d0

  • SHA512

    e5da84a1d465f5d02c39f1a3b14c7b83087dbaf68c18746246d1cb5e8e3dac354756e8cd3c8e2cbdf43dc44be242a6fbaa0655a79fd86383a8e1de344de34cba

  • SSDEEP

    49152:UiBc0rIFqLsM2v0ApTtIU4/FWigpSWTa4gHiXej/dgLgJtNuw29rAszZ1ZU4n:PJpL72v0WTt5pBTaHHiXQisJGw2rR24n

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ef3afcbadcfb8d6dff5a7fa59e3ea471_JaffaCakes118
    .rar
  • -=宾炜炜=- [力挽狂澜]软件工作室.nfo
  • -=宾炜炜=- [力挽狂澜]软件工作室.txt
  • LPng.dll
    .dll windows:4 windows x86 arch:x86

    2f053193683ef62917b43d3ac519b5f0


    Headers

    Imports

    Exports

    Sections

  • Readme-说明.htm
    .html
  • Reg Patch.reg
  • data/1_1.jpg
    .jpg
  • data/1_2.jpg
    .jpg
  • data/2_1.jpg
    .jpg
  • data/2_2.jpg
    .jpg
  • data/wait.avi
  • data/www2image.sui
  • help.chm
    .chm
  • setting.ini
  • www2image v1.7.GIF
  • www2image.chs
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • www2image.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 软件说明.txt