Overview

overview

3

Static

static

3

ttwyc/EThread.dll

windows7-x64

3

ttwyc/EThread.dll

windows10-2004-x64

3

ttwyc/HTML...ge.htm

windows7-x64

3

ttwyc/HTML...ge.htm

windows10-2004-x64

3

ttwyc/HTML...ect.js

windows7-x64

3

ttwyc/HTML...ect.js

windows10-2004-x64

3

ttwyc/HTML...unc.js

windows7-x64

3

ttwyc/HTML...unc.js

windows10-2004-x64

3

ttwyc/cncnv.dll

windows7-x64

3

ttwyc/cncnv.dll

windows10-2004-x64

3

ttwyc/com.dll

windows7-x64

3

ttwyc/com.dll

windows10-2004-x64

3

ttwyc/downlib.dll

windows7-x64

3

ttwyc/downlib.dll

windows10-2004-x64

3

ttwyc/eCompress.dll

windows7-x64

3

ttwyc/eCompress.dll

windows10-2004-x64

3

ttwyc/eDB.dll

windows7-x64

3

ttwyc/eDB.dll

windows10-2004-x64

3

ttwyc/iext.dll

windows7-x64

3

ttwyc/iext.dll

windows10-2004-x64

3

ttwyc/iext3.dll

windows7-x64

3

ttwyc/iext3.dll

windows10-2004-x64

3

ttwyc/internet.dll

windows7-x64

3

ttwyc/internet.dll

windows10-2004-x64

3

ttwyc/krnln.dll

windows7-x64

3

ttwyc/krnln.dll

windows10-2004-x64

3

ttwyc/seoupdate.exe

windows7-x64

3

ttwyc/seoupdate.exe

windows10-2004-x64

3

ttwyc/shellEx.dll

windows7-x64

3

ttwyc/shellEx.dll

windows10-2004-x64

3

ttwyc/单�...��.url

windows7-x64

1

ttwyc/单�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5365ca7fb05204a7dfe66bc1d1624ea0_JaffaCakes118

  • Size

    1.1MB

  • MD5

    5365ca7fb05204a7dfe66bc1d1624ea0

  • SHA1

    aaeacabc048ecdf15dfa64524bc20f9caabc007b

  • SHA256

    100eff95de5cae87264a41c9336eabebb408c2b3b61ed8707163c6f0d0db3c83

  • SHA512

    9eebf61854e197479c922991d57dbf52632eb7434f687f4a12ef4fd33e17cd7b156b99d42c1494174ab4f0878a46e62e367f49deaea7dc7b656c9bbefac7a524

  • SSDEEP

    24576:224fUGmcBQdcoSM+siziGzL26v+kOl53sbHv6bUCUy79Ci:74fUGmcedEM+s2iGz3+zd+Mci

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 5365ca7fb05204a7dfe66bc1d1624ea0_JaffaCakes118
    .rar
  • ttwyc/EThread.fne
    .dll windows:4 windows x86 arch:x86

    62e5db1ba371409d5b2d25cef78e9ce3


    Headers

    Imports

    Exports

    Sections

  • ttwyc/HTMLedit/1.gif
    .gif
  • ttwyc/HTMLedit/10.gif
    .gif
  • ttwyc/HTMLedit/11.gif
    .gif
  • ttwyc/HTMLedit/12.gif
    .gif
  • ttwyc/HTMLedit/13.gif
    .gif
  • ttwyc/HTMLedit/14.gif
    .gif
  • ttwyc/HTMLedit/15.gif
    .gif
  • ttwyc/HTMLedit/16.gif
    .gif
  • ttwyc/HTMLedit/17.gif
    .gif
  • ttwyc/HTMLedit/18.gif
    .gif
  • ttwyc/HTMLedit/19.gif
    .gif
  • ttwyc/HTMLedit/2.gif
    .gif
  • ttwyc/HTMLedit/3.gif
    .gif
  • ttwyc/HTMLedit/4.gif
    .gif
  • ttwyc/HTMLedit/5.gif
    .gif
  • ttwyc/HTMLedit/6.gif
    .gif
  • ttwyc/HTMLedit/7.gif
    .gif
  • ttwyc/HTMLedit/8.gif
    .gif
  • ttwyc/HTMLedit/9.gif
    .gif
  • ttwyc/HTMLedit/HtmlEdit.htm
    .html .js polyglot
  • ttwyc/HTMLedit/Thumbs.db
  • ttwyc/HTMLedit/bg.gif
    .gif
  • ttwyc/HTMLedit/blankpage.htm
    .html
  • ttwyc/HTMLedit/colorSelect.js
    .js
  • ttwyc/HTMLedit/editfunc.js
    .js
  • ttwyc/HTMLedit/line.gif
    .gif
  • ttwyc/c.nmp
  • ttwyc/cncnv.fne
    .dll windows:4 windows x86 arch:x86

    b2e50cc60a521158b3ea2d099cbea42b


    Headers

    Imports

    Exports

    Sections

  • ttwyc/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • ttwyc/downlib.fne
    .dll windows:4 windows x86 arch:x86

    5b7b89cf97e6c9cb92a256b4dc3df833


    Headers

    Imports

    Exports

    Sections

  • ttwyc/eCompress.fne
    .dll windows:4 windows x86 arch:x86

    8ff650a0e5dac613c5ee06a64bb8862b


    Headers

    Imports

    Exports

    Sections

  • ttwyc/eDB.fne
    .dll windows:4 windows x86 arch:x86

    7653d067fe85da664e5762a6c78ade23


    Headers

    Imports

    Exports

    Sections

  • ttwyc/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • ttwyc/iext3.fne
    .dll windows:4 windows x86 arch:x86

    d06ca9724c3c6b11eb22944835d02ae1


    Headers

    Imports

    Exports

    Sections

  • ttwyc/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • ttwyc/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • ttwyc/seodata.mdb
  • ttwyc/seoupdate.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • ttwyc/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    83c5a1bfd08221cfa9c880c04f59a4e7


    Headers

    Imports

    Exports

    Sections

  • ttwyc/单机游戏下载.url
    .url
  • ttwyc/天天SEO伪原创工具.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • ttwyc/河源下载站-cngr.cn.url
    .url
  • ttwyc/淘宝热卖.url
    .url
  • ttwyc/软件说明.txt