General

  • Target

    309d52de62a9d11a0bba7ac9b608ca9e_JaffaCakes118

  • Size

    584KB

  • MD5

    309d52de62a9d11a0bba7ac9b608ca9e

  • SHA1

    e2b406beba1103a6e176b82a6860da0706e1aa8a

  • SHA256

    d9931e4e889863fa4f9479c6627962351b4bda8a1daa86469615f3cbb7597848

  • SHA512

    29a2d84aa6ac8196772f2004c96448d125272485f60f05824aecd7585f9027b0b583f944ed0af7cf24a1188f15fb8406b5607e90ab5f92a5a31f3cb86b396b3a

  • SSDEEP

    12288:8cGnNqx01KRMlOAtLLI6XD5kSa6WGcW3XaFFQ7Ms12/XZ5nyiUUAiwdm+bGW:8cvnKwA1LISD5kUceqFS7F2POPUALbGW

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 309d52de62a9d11a0bba7ac9b608ca9e_JaffaCakes118
    .rar
  • Robolet_AIONTool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • aion/Config.ini
  • aion/DB/DB_178.ini
  • aion/DB/DB_DW.ini
  • aion/DB/DB_SINA.ini
  • aion/Language/Chinese(Simplified).ini
  • aion/Language/Setup.ini
  • aion/Setup.ini
  • lua.dll
    .dll windows:4 windows x86 arch:x86

    9074b30ff0268a3f3f7574d66eabd392


    Headers

    Imports

    Exports

    Sections

  • lualib.dll
    .dll windows:4 windows x86 arch:x86

    4d26fb599d6bb8b8778486eca6e7755a


    Headers

    Imports

    Exports

    Sections

  • 优化.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 工作室交流群.txt
  • 软件使用条款.txt