General

  • Target

    f0fe69fee803eeaa6115b3cf2f82afbb_JaffaCakes118

  • Size

    5.2MB

  • MD5

    f0fe69fee803eeaa6115b3cf2f82afbb

  • SHA1

    2d57422f0ef27858cc43ce701b5e6965d9234861

  • SHA256

    8e1eab7909d40c1ebb6f025fd263c19c7702e1f031937dea9d63acd74c55a734

  • SHA512

    482ad872ca17455372d37f609a9f86dad13918d096d1e1bb8785496cdf17bf3daf27686d45f1ff63e0caeb40d1cd8c3dec5695597764280135334cd524c918f6

  • SSDEEP

    98304:lari6YAh2ZDOFUafSSleBIs6Jp3TgsInLj7oWGKCJ1Hlw+qZ9NV76kOzAfez:lariFtZDOFlfVC6D3TpIL9GKn+WzV2bl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • f0fe69fee803eeaa6115b3cf2f82afbb_JaffaCakes118
    .rar
  • maths22/DBENG50.EXE
    .exe windows:1 windows x86 arch:x86

    b62c6b6419cbafcc545cd99b1845193e


    Headers

    Imports

    Exports

    Sections

  • maths22/dbl50t.dll
    .dll windows:1 windows x86 arch:x86

    676c9b67594c28b185a6e80ea7df12fb


    Headers

    Imports

    Exports

    Sections

  • maths22/help.chm
    .chm
  • maths22/ico/Thumbs.db
  • maths22/ico/bu.bmp
  • maths22/ico/jzg_2.bmp
  • maths22/ico/keys.ico
  • maths22/jk.dll
    .dll windows:1 windows x86 arch:x86

    923f92fa58d37724ec45dd32110453e2


    Headers

    Imports

    Exports

    Sections

  • maths22/lsss.dll
    .dll windows:1 windows x86 arch:x86

    6a2051fd354b919f91a0c42755cf6004


    Headers

    Imports

    Exports

    Sections

  • maths22/maths.exe
    .exe windows:1 windows x86 arch:x86

    33e8ba2fe3d79bd5cb15a5188a541328


    Headers

    Imports

    Sections

  • maths22/maths1.db
  • maths22/msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    2e1eba8cb75cfc08a34c0859ae1374d4


    Headers

    Imports

    Exports

    Sections

  • maths22/msvcrt40.dll
    .dll windows:4 windows x86 arch:x86

    04d6296cedbb802ab01e1acd953686ba


    Headers

    Imports

    Exports

    Sections

  • maths22/music/99meigui.mid
  • maths22/music/FATAL1.WAV
  • maths22/music/FATAL2.WAV
  • maths22/music/FATAL3.WAV
  • maths22/music/GOOD0.WAV
  • maths22/music/GOOD1.WAV
  • maths22/music/LIONKING.MID
  • maths22/music/TestSnd.wav
  • maths22/music/beijing_j.mid
  • maths22/music/china.mid
  • maths22/music/china_sing.mid
  • maths22/music/dd.WAV
  • maths22/music/dlss.mid
  • maths22/music/dnh.mid
  • maths22/music/feng_shou_qu
  • maths22/music/gantan.WAV
  • maths22/music/glgs.mid
  • maths22/music/home.mid
  • maths22/music/kenan.mid
  • maths22/music/ks.WAV
  • maths22/music/kuai_le_xiao_niao
  • maths22/music/lexdd.mid
  • maths22/music/liangzhu.mid
  • maths22/music/ljty.mid
  • maths22/music/mls.mid
  • maths22/music/monk.mid
  • maths22/music/qd.wav
  • maths22/music/qzh.mid
  • maths22/music/sai_shang_qu
  • maths22/music/shang_xue_ge
  • maths22/music/watch
  • maths22/music/welcome.wav
  • maths22/music/xiao_la_ba
  • maths22/music/xiao_tu_zi
  • maths22/music/xiao_ya_zi
  • maths22/music/xiao_yan_zi
  • maths22/music/xzzty.mid
  • maths22/music/yc.WAV
  • maths22/music/zj.WAV
  • maths22/olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5c24f9b3720fc0ae25a865a15ca714f2


    Headers

    Imports

    Exports

    Sections

  • maths22/pbdwe60.dll
    .dll windows:4 windows x86 arch:x86

    84a08ead863b5e3bd638bb36fa989652


    Headers

    Imports

    Exports

    Sections

  • maths22/pbodb60.dll
    .dll windows:4 windows x86 arch:x86

    9dbe0e6631d201626654705f4ed548ca


    Headers

    Imports

    Exports

    Sections

  • maths22/pbodb60.ini
  • maths22/pbprx60.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • maths22/pbvm60.dll
    .dll windows:4 windows x86 arch:x86

    8cb3617398b34a9e3ca84dbba3937b90


    Headers

    Imports

    Exports

    Sections

  • maths22/user1.db
  • maths22/wl50ent.dll
    .dll windows:1 windows x86 arch:x86

    1de608176986b281a32fdfc764d6b1ba


    Headers

    Imports

    Exports

    Sections

  • maths22/wod50t.dll
    .dll windows:1 windows x86 arch:x86

    c3af8b843c3c66aa6a9a27d2fae71abb


    Headers

    Imports

    Exports

    Sections

  • maths22/wtr50t.dll
    .dll windows:1 windows x86 arch:x86

    a2253ee44eb9c181a83cce16be315df0


    Headers

    Imports

    Exports

    Sections

  • maths22/zgl.dll
    .dll windows:1 windows x86 arch:x86

    be16bb825cbd4879b8d51519e8019cc3


    Headers

    Imports

    Exports

    Sections

  • maths22/下载说明.htm
    .html .js polyglot
  • maths22/快捷方式 到 maths.lnk
    .lnk
  • 下载说明.htm
    .html .js polyglot