Overview

overview

7

Static

static

3

YY小说-�...��.url

windows7-x64

1

YY小说-�...��.url

windows10-2004-x64

1

x5buluo.exe

windows7-x64

3

x5buluo.exe

windows10-2004-x64

3

小林子�...��.url

windows7-x64

1

小林子�...��.url

windows10-2004-x64

1

小林子论坛.url

windows7-x64

1

小林子论坛.url

windows10-2004-x64

1

炫舞部�...��.exe

windows7-x64

7

炫舞部�...��.exe

windows10-2004-x64

7

绝对好�...��.url

windows7-x64

1

绝对好�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4476ae087e3fbf825b6eb04d655a05de_JaffaCakes118

  • Size

    975KB

  • MD5

    4476ae087e3fbf825b6eb04d655a05de

  • SHA1

    9407ecb5ea60c6ae555bfdc2e7385abce9fe0a4d

  • SHA256

    5a3ac437f119cc9c94dacc8894073273f4054841b5f14e883f9adc8433ee54ca

  • SHA512

    73a7ab50bb30e00d38657514589a3241b0d69b0380caf94a9757370e0a6f297720cc616a7bb42a7ca4c0082a81a974a3530afc5889c57363085f632b10668a9d

  • SSDEEP

    24576:eYgHhT02zz9xGPzQrlwm3eEOz9hpQLiA0OE/lT+KsPNn/V:6HhT9zuO/apQLklcV/V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4476ae087e3fbf825b6eb04d655a05de_JaffaCakes118
    .rar
  • YY小说-言情-玄幻.url
  • x5buluo.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 使用◆说明.txt
  • 外挂注册.reg
  • 小林子外挂网.url
  • 小林子论坛.url
  • 炫舞部落12.9脚本+补丁12亿.exe
    .exe windows:4 windows x86 arch:x86

    1f419dd38e6ffa47b86ff01692db3c4d


    Headers

    Imports

    Sections

  • 绝对好玩的网页游戏.url