General

  • Target

    047843924c728e6a8ced18941efbf07e_JaffaCakes118

  • Size

    452KB

  • MD5

    047843924c728e6a8ced18941efbf07e

  • SHA1

    b3d5ada572dd444a10aec282163782abfd00c5e7

  • SHA256

    979d9396c674ff499e38e39b7b7693d39effa98e71c95944e66952a77ef9caf7

  • SHA512

    4dd0a95dc721df3c33a3283111bb6eeab422590598dbdcd1081240f680b1de685adef5b87af54d2e85bc3ba044b088f5f620de0ae0a216ccb9b7af683324ae10

  • SSDEEP

    6144:WwXYrt1fzcCoQPHeGHa4bBCwMsPKeJSnjiVWN79NgAax0Dn6qwKrFU8+ffGlSllf:OrtFkUa4bceWisgFKDppU+4HuC

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 047843924c728e6a8ced18941efbf07e_JaffaCakes118
    .rar
  • Readme-说明.htm
    .html
  • csDSzbq/csDSzbq/007.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • csDSzbq/csDSzbq/CS_007.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • csDSzbq/csDSzbq/cdhack.cfg
  • csDSzbq/csDSzbq/default.cfg
  • 该软件介绍说明及注意事项.txt