Overview

overview

5

Static

static

5

BmpOperate.dll

windows7-x64

3

BmpOperate.dll

windows10-2004-x64

3

EThread.dll

windows7-x64

3

EThread.dll

windows10-2004-x64

3

HtmlView.dll

windows7-x64

3

HtmlView.dll

windows10-2004-x64

3

com.dll

windows7-x64

3

com.dll

windows10-2004-x64

3

dp1.dll

windows7-x64

3

dp1.dll

windows10-2004-x64

3

eAPI.dll

windows7-x64

3

eAPI.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

internet.dll

windows7-x64

3

internet.dll

windows10-2004-x64

3

krnln.dll

windows7-x64

3

krnln.dll

windows10-2004-x64

3

shell.dll

windows7-x64

3

shell.dll

windows10-2004-x64

3

sock.dll

windows7-x64

3

sock.dll

windows10-2004-x64

3

spec.dll

windows7-x64

3

spec.dll

windows10-2004-x64

3

xplib.dll

windows7-x64

3

xplib.dll

windows10-2004-x64

3

开始.exe

windows7-x64

5

开始.exe

windows10-2004-x64

5

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fca536cbc90f03c0478b83743727402a_JaffaCakes118

  • Size

    1.4MB

  • MD5

    fca536cbc90f03c0478b83743727402a

  • SHA1

    a3318aa5ba283ea74154faadc7f97528c0bc7356

  • SHA256

    f352d4fc92cebf85ad4817c996fd8c3b5c9d47d6520620b82c6882909838055d

  • SHA512

    758cfbc996a5202673f5a806696ed70dad138006fb28bedd1beae05c86aaf35611999d5c6879d8c8904ae0da768f5bcfd3470c39564527039ca42b0ad2312c7c

  • SSDEEP

    24576:XYUSmius0zm65wwLRtfK7koFUo9OAPfrofCs1o52XBS7STkYvJV1l/2dUCj990Ow:XYUSYsyV5vLffK7koioEAPDofbQeS7eN

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • fca536cbc90f03c0478b83743727402a_JaffaCakes118
    .rar
  • ADSL.fnr
  • BmpOperate.fnr
    .dll windows:4 windows x86 arch:x86

    55cff23a855eb2779a26abc113ecb4b5


    Headers

    Imports

    Sections

  • EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Sections

  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Sections

  • IP.txt
  • ain.fnr
  • com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Sections

  • dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Sections

  • eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Sections

  • internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Sections

  • ok.fne
  • shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Sections

  • sock.fne
    .dll windows:4 windows x86 arch:x86

    3a68fc71a60d9416884d002a7b832aaf


    Headers

    Imports

    Sections

  • spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Sections

  • xplib.fne
    .dll windows:4 windows x86 arch:x86

    9fef9bf9acc89e1f2c179276720200a6


    Headers

    Imports

    Sections

  • 开始.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url