Overview

overview

3

Static

static

3

xkmobile/RegEx.dll

windows7-x64

3

xkmobile/RegEx.dll

windows10-2004-x64

3

xkmobile/index.html

windows7-x64

3

xkmobile/index.html

windows10-2004-x64

3

xkmobile/internet.dll

windows7-x64

3

xkmobile/internet.dll

windows10-2004-x64

3

xkmobile/krnln.dll

windows7-x64

3

xkmobile/krnln.dll

windows10-2004-x64

3

xkmobile/mp3.dll

windows7-x64

3

xkmobile/mp3.dll

windows10-2004-x64

3

xkmobile/odbcdb.dll

windows7-x64

3

xkmobile/odbcdb.dll

windows10-2004-x64

3

xkmobile/spec.dll

windows7-x64

3

xkmobile/spec.dll

windows10-2004-x64

3

xkmobile/�...��.htm

windows7-x64

3

xkmobile/�...��.htm

windows10-2004-x64

3

xkmobile/�...��.exe

windows7-x64

3

xkmobile/�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b8705ac4b7b16ae7070cddf7ec994e0_JaffaCakes118

  • Size

    1.8MB

  • MD5

    3b8705ac4b7b16ae7070cddf7ec994e0

  • SHA1

    daa911028477570079d5c5c05552e0d116f4bf8c

  • SHA256

    eb76c9a08e59f97843cae3af1d95fb914353c24ba2f65403418b9150a1c33594

  • SHA512

    dc875467ca2f2dd040a156ebc0263cf5ad8ec39243cbf131aec5b6ae63fab3bece44084828d92fa92e1a4dde0390b8616179dd2ee531369387e48f4a65356295

  • SSDEEP

    49152:nLYVitLGl9vMkPBvK0CpFzT4Q1qdoWN/48:LYotLcMiCpB4Q1qHm8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b8705ac4b7b16ae7070cddf7ec994e0_JaffaCakes118
    .zip
  • xkmobile/RegEx.fnr
    .dll windows:4 windows x86 arch:x86

    17065b5c253ba1d2ebb061964e090d5e


    Headers

    Imports

    Exports

    Sections

  • xkmobile/images/image001.jpg
    .jpg
  • xkmobile/images/image002.jpg
    .jpg
  • xkmobile/images/image004.jpg
    .jpg
  • xkmobile/images/image008.jpg
    .jpg
  • xkmobile/images/image009.jpg
    .jpg
  • xkmobile/index.html
    .html
  • xkmobile/index.swf
  • xkmobile/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • xkmobile/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • xkmobile/mp3.run
    .dll windows:4 windows x86 arch:x86

    0d8883fcd2ea3109e5c236a22c15dac3


    Headers

    Imports

    Exports

    Sections

  • xkmobile/odbcdb.run
    .dll windows:4 windows x86 arch:x86

    8d39cc29fc03ef63eb422a7846da88c3


    Headers

    Imports

    Exports

    Sections

  • xkmobile/spec.fne
    .dll windows:4 windows x86 arch:x86

    0b8b5f9848c670c631fa790d1a1a90e5


    Headers

    Imports

    Exports

    Sections

  • xkmobile/先科手机定位帮助文件.htm
    .html
  • xkmobile/先科手机定位追踪终端系统 2013版.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections