Overview

overview

3

Static

static

3

灰鸽子�...er.exe

windows7-x64

3

灰鸽子�...er.exe

windows10-2004-x64

3

2.03.exe

windows7-x64

3

2.03.exe

windows10-2004-x64

3

dark.exe

windows7-x64

3

dark.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    43211fe70021522720845d9891729371_JaffaCakes118

  • Size

    3.0MB

  • MD5

    43211fe70021522720845d9891729371

  • SHA1

    a4a63ab1cfdd0ca449207686e54eaa37dcf66a61

  • SHA256

    e6eac8353b1a2b51d2f9734175d137c31b6e609ba147726acbf463783d10c37f

  • SHA512

    94a83c167bad5befd4be7f6d64428a61caab63b7ab4e1a11858699a5be3348b162376278974df58907dd5bb98bcbeb93686da67636ced926d30b38a335bc5c84

  • SSDEEP

    49152:60NppxAGsJgA7Wudsw7CYma+bNj7LSLtEVBxPc1LREq8cqutrpYWsDZh8rM0ALyx:60fAvgUt7Hm1162Bx09gcTJeBe2hi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 43211fe70021522720845d9891729371_JaffaCakes118
    .rar
  • 灰鸽子黑防And2.03暗组专版/Config/2009-08-10_152603.dat
  • 灰鸽子黑防And2.03暗组专版/Config/2009-08-10_152603.ini
  • 灰鸽子黑防And2.03暗组专版/Config/2009-09-04_094632.dat
  • 灰鸽子黑防And2.03暗组专版/Config/2009-09-04_094632.ini
  • 灰鸽子黑防And2.03暗组专版/Operate.ini
  • 灰鸽子黑防And2.03暗组专版/SOUND/downfile.wav
  • 灰鸽子黑防And2.03暗组专版/SOUND/login.wav
  • 灰鸽子黑防And2.03暗组专版/SOUND/offline.wav
  • 灰鸽子黑防And2.03暗组专版/SOUND/setting.wav
  • 灰鸽子黑防And2.03暗组专版/SOUND/upfile.wav
  • 灰鸽子黑防And2.03暗组专版/dat/QQwry.dat
  • 灰鸽子黑防And2.03暗组专版/dat/ResHacker.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 灰鸽子黑防And2.03暗组专版/readme.txt
  • 灰鸽子黑防And2.03暗组专版/处理过的ser.rar
    .rar
  • 2.03.ser
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • dark.ser
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections