General

  • Target

    ec916c88bc8bba1276f1e5af17093e5c_JaffaCakes118

  • Size

    4.3MB

  • MD5

    ec916c88bc8bba1276f1e5af17093e5c

  • SHA1

    9ac9476ef7f7e8975178cfffb9ed28b1c47552d3

  • SHA256

    d2dbebaf7d20189a83c281bbab6cce71b8eb7859c09b8b09b3ebb23740dca1bb

  • SHA512

    ca95889503dbb3d7d40201a0a722bb5aaab73746c86fd5033046254c608f3dcf29f0de2b71b71c1d163f3098395acb33b03d4519dc0cf97ed0c63366faa8c0c2

  • SSDEEP

    98304:IG5+RIOpqFajMTiJqEihW4ckadljRB05V+gMmi7CIgQ2EE97xWi:IG5S8sfXinaRBoVWmimIgQxE97D

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • ec916c88bc8bba1276f1e5af17093e5c_JaffaCakes118
    .rar
  • DllEmForm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TYFrame.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • app.ini
  • ca.crt
  • config.ini
  • conn.bin
  • conncfg.bin
  • conncfg6.bin
  • data/bmnet.inf
  • data/bmnet.sys
    .sys windows:5 windows x86 arch:x86

    74e6c9148f2e645f4ef4e6aab8b540a6


    Headers

    Imports

    Sections

  • data/drvinst.exe
    .exe windows:5 windows x86 arch:x86

    575a28d688d159a394f4aab4da2ed819


    Headers

    Imports

    Sections

  • data/新云软件.url
    .url
  • frmdc.txt
  • gnames.txt
  • hconn
  • kf_tel.txt
  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    1dc9379c71e2e17689f07831f1dbd009


    Headers

    Imports

    Exports

    Sections

  • nodes
  • prcdcdll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • route
  • splist.ini
  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    19d281195717327ebb6cdb3251cf78c5


    Headers

    Imports

    Exports

    Sections

  • ta.key
  • tyframe.exe_
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • unicallem.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • unins000.dat
  • unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vcode.bmp
  • ver
  • verinfo.ini
  • verinfo_.ini