Overview

overview

7

Static

static

3

learnwords...88.vbs

windows7-x64

1

learnwords...88.vbs

windows10-2004-x64

1

learnwords...61.vbs

windows7-x64

1

learnwords...61.vbs

windows10-2004-x64

1

learnwords...81.vbs

windows7-x64

1

learnwords...81.vbs

windows10-2004-x64

1

learnwords...ry.dll

windows7-x64

1

learnwords...ry.dll

windows10-2004-x64

1

learnwords...ds.lnk

windows7-x64

6

learnwords...ds.lnk

windows10-2004-x64

7

learnwords/RUNME.bat

windows7-x64

1

learnwords/RUNME.bat

windows10-2004-x64

1

learnwords...er.exe

windows7-x64

1

learnwords...er.exe

windows10-2004-x64

1

learnwords...et.url

windows7-x64

6

learnwords...et.url

windows10-2004-x64

3

learnwords/lwdupd.exe

windows7-x64

1

learnwords/lwdupd.exe

windows10-2004-x64

1

learnwords...fo.exe

windows7-x64

1

learnwords...fo.exe

windows10-2004-x64

1

learnwords...ET.url

windows7-x64

1

learnwords...ET.url

windows10-2004-x64

1

learnwords...��.url

windows7-x64

1

learnwords...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e895452e809f209d70686772b3b80c55_JaffaCakes118

  • Size

    1.3MB

  • MD5

    e895452e809f209d70686772b3b80c55

  • SHA1

    fcbb0ce6721b205d507d7477c7ad34628b1c0b01

  • SHA256

    c1aa913f0fedc124d45f5ca244bb2d3e26b4b9d1df98098279f087233356231d

  • SHA512

    dec55e9f02407bfaed219f914ecafb4bd2b0681cde69c22689302c6e63ae4bc43cab73564733c24a2baf58e23ee575240da4783e31cb61a85388a5ebdecb15e3

  • SSDEEP

    24576:SAI6J3IzEvb+ZklRApzlTmJAlA0PDlSi0K+Twc3kr3vSwGyLn1oGnWRPhqtnh4:SAQzEiZOABvlDPJf+Msk7KmnPnj4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • e895452e809f209d70686772b3b80c55_JaffaCakes118
    .rar
  • learnwords/CHX级别1小学入学前191.txt
  • learnwords/CHX级别2小学毕业生488.txt
    .vbs
  • learnwords/CHX级别3初中毕业生1087.txt
  • learnwords/CHX级别4高中毕业生1561.txt
    .vbs
  • learnwords/CHX级别5大学毕业生3281.txt
    .vbs
  • learnwords/CHX级别6留学生研究生6992.txt
  • learnwords/Interop.IWshRuntimeLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • learnwords/LearnWords.chx
  • learnwords/LearnWords.lnk
    .lnk
  • learnwords/Learnwords.wl
  • learnwords/README.txt
  • learnwords/RUNME.bat
  • learnwords/Remember.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • learnwords/download.net.url
  • learnwords/initword.chx
  • learnwords/learnwords.INI
  • learnwords/lwdupd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • learnwords/showinfo.exe
    .exe windows:4 windows x86 arch:x86

    32c306d73380bddbf1206d4c3f3ef2af


    Headers

    Imports

    Sections

  • learnwords/如程序无法运行请点击下载.NET.url
  • learnwords/新云软件.url
    .url