Overview

overview

3

Static

static

3

[系統工...NT.exe

windows7-x64

3

[系統工...NT.exe

windows10-2004-x64

3

[系統工...Ke.dll

windows7-x64

3

[系統工...Ke.dll

windows10-2004-x64

3

[系統工...ok.dll

windows7-x64

3

[系統工...ok.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    139dfd3295d955a78264007d0b36db7b_JaffaCakes118

  • Size

    378KB

  • MD5

    139dfd3295d955a78264007d0b36db7b

  • SHA1

    c2ba523c4b9c85194af87d8248f7c3bf2e1cc9cf

  • SHA256

    79c7d881373e497dcad22ebeea064b99044fe80516f59f1716b87688747fddf3

  • SHA512

    c83d70a6476c4b16336e0ed481661918a773e912b965af5ca23124d660768aa44318cbf6579fec85f3c2e1ff753084e3278d548b8ce4f48cbc2a1daaf708514b

  • SSDEEP

    6144:v9TW7xa9lKsIZwpqq+QRork/fygHJJa7WqNHN3yQvfA/J/zDaTZ:1UM5Iqen4HyIG7WgHdA/taN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 139dfd3295d955a78264007d0b36db7b_JaffaCakes118
    .7z
  • [系統工具]變速齒輪0.44 繁中化綠色版本/GearNT.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • [系統工具]變速齒輪0.44 繁中化綠色版本/GearNtKe.dll
    .dll windows:5 windows x86 arch:x86

    0ffbbba2432b10f63d51b00ab027c531


    Headers

    Imports

    Exports

    Sections

  • [系統工具]變速齒輪0.44 繁中化綠色版本/Hook.dll
    .dll windows:4 windows x86 arch:x86

    a54ca693e4f4580cbdb61885c583b35c


    Headers

    Imports

    Exports

    Sections

  • [系統工具]變速齒輪0.44 繁中化綠色版本/xp_blue.mskn
  • [系統工具]變速齒輪0.44 繁中化綠色版本/變速齒輪.ini