General

  • Target

    07765f003b0b013cb0f4f724a047e30c_JaffaCakes118

  • Size

    2.3MB

  • MD5

    07765f003b0b013cb0f4f724a047e30c

  • SHA1

    9a4df20ea8087f624d2d0a90c5054bd5512ac007

  • SHA256

    6ad3d8bc442b3b5d6bb1d763f81bd31c58c95840c072274fd68a76ae726d85e2

  • SHA512

    f2126a1c4c52b16520d1bae424da28f24d552a8b84e2b41e3fdac7e03ab96e9446e4072583547d0ec9cab0486aa43cedd52ac7242dcf6cfa6189e968e8416377

  • SSDEEP

    49152:mkB9j0OXNeg5IwTdQKfL6s4XYQhYORCpH5WUsHUt880:mK4GRaSuX7Y5Z5Q80

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 07765f003b0b013cb0f4f724a047e30c_JaffaCakes118
    .rar
  • tianxia3_jb/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • tianxia3_jb/dm_800.txt
  • tianxia3_jb/dm_soft.txt
  • tianxia3_jb/dm_soft1.txt
  • tianxia3_jb/tu/Thumbs.db
  • tianxia3_jb/tu/down.bmp
  • tianxia3_jb/tu/left.bmp
  • tianxia3_jb/tu/rdown.bmp
  • tianxia3_jb/tu/right.bmp
  • tianxia3_jb/tu/rleft.bmp
  • tianxia3_jb/tu/rright.bmp
  • tianxia3_jb/tu/rup.bmp
  • tianxia3_jb/tu/up.bmp
  • tianxia3_jb/tu/关闭.bmp
  • tianxia3_jb/tu/关闭2.bmp
  • tianxia3_jb/tu/关闭3.bmp
  • tianxia3_jb/tu/关闭4.bmp
  • tianxia3_jb/tu/包袱1.bmp
  • tianxia3_jb/tu/包袱2.bmp
  • tianxia3_jb/tu/包裹.bmp
  • tianxia3_jb/tu/包裹2.bmp
  • tianxia3_jb/tu/可替换.bmp
  • tianxia3_jb/tu/可采集.bmp
  • tianxia3_jb/tu/同意.bmp
  • tianxia3_jb/tu/同意1.bmp
  • tianxia3_jb/tu/同意2.bmp
  • tianxia3_jb/tu/坐标1.bmp
  • tianxia3_jb/tu/坐标2.bmp
  • tianxia3_jb/tu/坐标3.bmp
  • tianxia3_jb/tu/坐标4.bmp
  • tianxia3_jb/tu/坐标5.bmp
  • tianxia3_jb/tu/坐标6.bmp
  • tianxia3_jb/tu/复件 可采集.bmp
  • tianxia3_jb/tu/宝箱.bmp
  • tianxia3_jb/tu/宝箱2.bmp
  • tianxia3_jb/tu/感知.bmp
  • tianxia3_jb/tu/感知2.bmp
  • tianxia3_jb/tu/捡物.bmp
  • tianxia3_jb/tu/捡物2.bmp
  • tianxia3_jb/tu/捡物3.bmp
  • tianxia3_jb/tu/放弃.bmp
  • tianxia3_jb/tu/放弃2.bmp
  • tianxia3_jb/tu/晶粒1.bmp
  • tianxia3_jb/tu/晶粒11.bmp
  • tianxia3_jb/tu/晶粒2.bmp
  • tianxia3_jb/tu/晶粒22.bmp
  • tianxia3_jb/tu/晶粒3.bmp
  • tianxia3_jb/tu/晶粒33.bmp
  • tianxia3_jb/tu/晶粒4.bmp
  • tianxia3_jb/tu/晶粒44.bmp
  • tianxia3_jb/tu/木检测器1.bmp
  • tianxia3_jb/tu/木检测器11.bmp
  • tianxia3_jb/tu/木检测器2.bmp
  • tianxia3_jb/tu/木检测器22.bmp
  • tianxia3_jb/tu/木检测器3.bmp
  • tianxia3_jb/tu/木检测器33.bmp
  • tianxia3_jb/tu/木检测器4.bmp
  • tianxia3_jb/tu/木检测器44.bmp
  • tianxia3_jb/tu/木检测器5.bmp
  • tianxia3_jb/tu/木检测器55.bmp
  • tianxia3_jb/tu/木检测器6.bmp
  • tianxia3_jb/tu/木检测器66.bmp
  • tianxia3_jb/tu/木检测器7.bmp
  • tianxia3_jb/tu/木检测器77.bmp
  • tianxia3_jb/tu/没熟.bmp
  • tianxia3_jb/tu/灵縕.bmp
  • tianxia3_jb/tu/玉检测器1.bmp
  • tianxia3_jb/tu/玉检测器11.bmp
  • tianxia3_jb/tu/玉检测器2.bmp
  • tianxia3_jb/tu/玉检测器22.bmp
  • tianxia3_jb/tu/玉检测器3.bmp
  • tianxia3_jb/tu/玉检测器33.bmp
  • tianxia3_jb/tu/玉检测器4.bmp
  • tianxia3_jb/tu/玉检测器44.bmp
  • tianxia3_jb/tu/玉检测器5.bmp
  • tianxia3_jb/tu/玉检测器55.bmp
  • tianxia3_jb/tu/玉检测器6.bmp
  • tianxia3_jb/tu/玉检测器66.bmp
  • tianxia3_jb/tu/玉检测器7.bmp
  • tianxia3_jb/tu/玉检测器77.bmp
  • tianxia3_jb/tu/生长期1.bmp
  • tianxia3_jb/tu/生长期2.bmp
  • tianxia3_jb/tu/矿检测器1.bmp
  • tianxia3_jb/tu/矿检测器11.bmp
  • tianxia3_jb/tu/矿检测器2.bmp
  • tianxia3_jb/tu/矿检测器22.bmp
  • tianxia3_jb/tu/矿检测器3.bmp
  • tianxia3_jb/tu/矿检测器33.bmp
  • tianxia3_jb/tu/矿检测器4.bmp
  • tianxia3_jb/tu/矿检测器44.bmp
  • tianxia3_jb/tu/矿检测器5.bmp
  • tianxia3_jb/tu/矿检测器55.bmp
  • tianxia3_jb/tu/矿检测器6.bmp
  • tianxia3_jb/tu/矿检测器66.bmp
  • tianxia3_jb/tu/矿检测器7.bmp
  • tianxia3_jb/tu/矿检测器77.bmp
  • tianxia3_jb/tu/确定.bmp
  • tianxia3_jb/tu/确定2.bmp
  • tianxia3_jb/tu/确认.bmp
  • tianxia3_jb/tu/确认2.bmp
  • tianxia3_jb/tu/组团.bmp
  • tianxia3_jb/tu/组团1.bmp
  • tianxia3_jb/tu/组队.bmp
  • tianxia3_jb/tu/组队1.bmp
  • tianxia3_jb/tu/组队2.bmp
  • tianxia3_jb/tu/草检测器1.bmp
  • tianxia3_jb/tu/草检测器11.bmp
  • tianxia3_jb/tu/草检测器2.bmp
  • tianxia3_jb/tu/草检测器22.bmp
  • tianxia3_jb/tu/草检测器3.bmp
  • tianxia3_jb/tu/草检测器33.bmp
  • tianxia3_jb/tu/草检测器4.bmp
  • tianxia3_jb/tu/草检测器44.bmp
  • tianxia3_jb/tu/草检测器5.bmp
  • tianxia3_jb/tu/草检测器55.bmp
  • tianxia3_jb/tu/草检测器6.bmp
  • tianxia3_jb/tu/草检测器66.bmp
  • tianxia3_jb/tu/草检测器7.bmp
  • tianxia3_jb/tu/草检测器77.bmp
  • tianxia3_jb/tu/血条.bmp
  • tianxia3_jb/tu/血条2.bmp
  • tianxia3_jb/tu/邀请组队.bmp
  • tianxia3_jb/tu/邀请组队2.bmp
  • tianxia3_jb/tu/钓鱼.bmp
  • tianxia3_jb/tu/钓鱼2.bmp
  • tianxia3_jb/tu/鱼竿1.bmp
  • tianxia3_jb/tu/鱼竿11.bmp
  • tianxia3_jb/tu/鱼竿2.bmp
  • tianxia3_jb/tu/鱼竿22.bmp
  • tianxia3_jb/tu/鱼竿3.bmp
  • tianxia3_jb/tu/鱼竿33.bmp
  • tianxia3_jb/天下3全能挂机脚本3.0正式版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tianxia3_jb/天下3采集组队器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tianxia3_jb/报警.mp3
  • tianxia3_jb/河源下载站-cngr.cn.url
    .url
  • tianxia3_jb/注意事项.txt
  • tianxia3_jb/淘宝热卖.url
    .url
  • tianxia3_jb/采集问题.txt
  • tianxia3_jb/预览图.bmp