Overview

overview

7

Static

static

7

塔防三�...ew.dll

windows7-x64

3

塔防三�...ew.dll

windows10-2004-x64

3

塔防三�...EL.dll

windows7-x64

5

塔防三�...EL.dll

windows10-2004-x64

5

塔防三�...om.dll

windows7-x64

3

塔防三�...om.dll

windows10-2004-x64

3

塔防三�...PI.dll

windows7-x64

3

塔防三�...PI.dll

windows10-2004-x64

3

塔防三�...ia.dll

windows7-x64

3

塔防三�...ia.dll

windows10-2004-x64

3

塔防三�...xt.dll

windows7-x64

3

塔防三�...xt.dll

windows10-2004-x64

3

塔防三�...t2.dll

windows7-x64

3

塔防三�...t2.dll

windows10-2004-x64

3

塔防三�...t3.dll

windows7-x64

3

塔防三�...t3.dll

windows10-2004-x64

3

塔防三�...t5.dll

windows7-x64

3

塔防三�...t5.dll

windows10-2004-x64

3

塔防三�...et.dll

windows7-x64

3

塔防三�...et.dll

windows10-2004-x64

3

塔防三�...ln.dll

windows7-x64

3

塔防三�...ln.dll

windows10-2004-x64

3

塔防三�...ln.dll

windows7-x64

3

塔防三�...ln.dll

windows10-2004-x64

3

塔防三�...ll.dll

windows7-x64

3

塔防三�...ll.dll

windows10-2004-x64

3

塔防三�...ec.dll

windows7-x64

3

塔防三�...ec.dll

windows10-2004-x64

3

塔防三�...mp.dll

windows7-x64

3

塔防三�...mp.dll

windows10-2004-x64

3

塔防三�...mp.exe

windows7-x64

5

塔防三�...mp.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f5a86bcf6d1a69a02493c2ed129b9a9_JaffaCakes118

  • Size

    5.4MB

  • MD5

    3f5a86bcf6d1a69a02493c2ed129b9a9

  • SHA1

    e0ee09685dc256d62f055b366ab9821faa7f8cfa

  • SHA256

    3947aa58b2f9d2c7d0385fc5e14773d51d857f03f3625cfcee70072c0fbf70d1

  • SHA512

    61a40565d00e9d6da3b09abe1f88679c329ba3e1fc62fae3cf7d853b57b3018dfdaccbfae8abbe46830f09cd24690e9e665627f9daf0ef904cf043ca62e2e578

  • SSDEEP

    98304:+w3equp9PgS2TVkQiCFB4o9TZPhlgJ+zdezAypHG8RRbXX7NP71VzpO5GHYVzQkH:jup9e8CkYDlgJ+gpdRTxv4AYVzQY

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f5a86bcf6d1a69a02493c2ed129b9a9_JaffaCakes118
    .rar
  • 塔防三国志小白辅助V5.2/HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/IPHlpApi.lib
  • 塔防三国志小白辅助V5.2/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/USER32.LIB
  • 塔防三国志小白辅助V5.2/WININET.LIB
  • 塔防三国志小白辅助V5.2/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/eMMedia.fne
    .dll regsvr32 windows:4 windows x86 arch:x86

    f55e1fa95f66780a39514dfcf98ab337


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/iext5.fne
    .dll windows:4 windows x86 arch:x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/kernel32.udd
  • 塔防三国志小白辅助V5.2/krnln.fne
    .dll windows:4 windows x86 arch:x86

    9fd3cbd6e4bcb197c9dcf1b36d9624c7


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/wmp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    7644aac249fd191d4c4847f92b0180de


    Headers

    Imports

    Exports

    Sections

  • 塔防三国志小白辅助V5.2/塔防三国志小白辅助V5.2_vmp.exe
    .exe windows:5 windows x86 arch:x86

    30587aa4ac582818d6c69f90c4be188c


    Headers

    Imports

    Sections

  • 小林子游戏网.url