General

  • Target

    14cd493d41b9cb69f54f8e3eed5c0d13_JaffaCakes118

  • Size

    1.8MB

  • MD5

    14cd493d41b9cb69f54f8e3eed5c0d13

  • SHA1

    2fd8ae7830ca27934afae65d3a861b1ee13131a8

  • SHA256

    ad1c459b2349a00d57bff0ed0d7966a98a678e61bca6ae0ed742936604c2f6eb

  • SHA512

    d7178ecb6cc85abdc0fb8e40ac9e63872c934c5f01d3c7a33d264ef677c006b08116b8deff864819017b7b840e59a7c7f622d8b97f95b6bc4ad8cb77bc2ebd36

  • SSDEEP

    49152:wQ1yHRkYNDLr2vb1dQaNJ79UyZjeXP86Rh:TyR+b1dQ8f4P86Rh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 14cd493d41b9cb69f54f8e3eed5c0d13_JaffaCakes118
    .zip
  • m3gdkq/Usp10.dll
    .dll windows:4 windows x86 arch:x86

    3b64ecbc6265fb71f1ea9208aa88644b


    Headers

    Imports

    Exports

    Sections

  • m3gdkq/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    7da7bb12497bd01841f214157430bcd9


    Code Sign

    Headers

    Imports

    Sections

  • m3gdkq/娱乐三国无双刷战绩脚本.exe
    .exe windows:4 windows x86 arch:x86

    5c9e0a59f2af69213db4a90d3e9e8781


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • m3gdkq/梦三国多开器.bat
  • m3gdkq/系统禁用VBS运行我.BAT
  • m3gdkq/西西软件园.txt
  • m3gdkq/西西软件园_游戏网下载_最安全的软件下载基地.url
    .url
  • 梦三国双开器独立版.exe
    .exe windows:4 windows x86 arch:x86

    cca0616ecfe0b1a3da2e7efded525b7e


    Headers

    Imports

    Sections