Overview

overview

7

Static

static

7

csDSzbq/007.dll

windows7-x64

5

csDSzbq/007.dll

windows10-2004-x64

5

csDSzbq/CS_007.exe

windows7-x64

3

csDSzbq/CS_007.exe

windows10-2004-x64

7

csDSzbq/�...gr.htm

windows7-x64

3

csDSzbq/�...gr.htm

windows10-2004-x64

3

csDSzbq/�...cn.url

windows7-x64

1

csDSzbq/�...cn.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    040fd4ab8447f8fef479a79edb9961ea_JaffaCakes118

  • Size

    435KB

  • MD5

    040fd4ab8447f8fef479a79edb9961ea

  • SHA1

    90b6cf2a3f0ddd45be51bb3c39a2516c8b4a8afe

  • SHA256

    aa8cbb04c607ea63408f3f17283cac3a8bf77d10dd09dfa581f941e941678b61

  • SHA512

    02ea5702d07523ad1e2a5351b9985da7601537a3c4d253c51bec18f789ac0f70d2b4dcf12af52f81b0ea76b7aa1d81693974404f6d678c04fceefb50f4f84053

  • SSDEEP

    12288:Z4xK5YN863jFzQYU9cIoM/gkd6E4zZgDnMZ2FI:aM5xSlIjtdV8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 040fd4ab8447f8fef479a79edb9961ea_JaffaCakes118
    .rar
  • csDSzbq/007.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • csDSzbq/CS_007.exe
    .exe windows:4 windows x86 arch:x86

    bc5ce990cf54f8d435a68eb97512f73e


    Headers

    Imports

    Sections

  • csDSzbq/cdhack.cfg
  • csDSzbq/default.cfg
  • csDSzbq/使用说明.txt
  • csDSzbq/必看说明cngr.htm
  • csDSzbq/河源下载站-cngr.cn.url
    .url