Overview

overview

7

Static

static

3

Aston_192_setup.exe

windows7-x64

7

Aston_192_setup.exe

windows10-2004-x64

7

$0/Plugins/AClock.dll

windows7-x64

1

$0/Plugins/AClock.dll

windows10-2004-x64

1

$0/Plugins/AstAmp.dll

windows7-x64

1

$0/Plugins/AstAmp.dll

windows10-2004-x64

1

$0/Plugins...un.dll

windows7-x64

1

$0/Plugins...un.dll

windows10-2004-x64

1

$0/Plugins...nt.dll

windows7-x64

1

$0/Plugins...nt.dll

windows10-2004-x64

1

$0/Plugins...Ex.dll

windows7-x64

1

$0/Plugins...Ex.dll

windows10-2004-x64

1

$0/Plugins/MenuEx.dll

windows7-x64

1

$0/Plugins/MenuEx.dll

windows10-2004-x64

1

$0/Plugins/NoteBk.dll

windows7-x64

1

$0/Plugins/NoteBk.dll

windows10-2004-x64

1

$0/Plugins/Panel.dll

windows7-x64

1

$0/Plugins/Panel.dll

windows10-2004-x64

1

$0/Plugins...ch.dll

windows7-x64

1

$0/Plugins...ch.dll

windows10-2004-x64

1

$0/Plugins...Ex.dll

windows7-x64

1

$0/Plugins...Ex.dll

windows10-2004-x64

1

$0/Plugins/Search.dll

windows7-x64

1

$0/Plugins/Search.dll

windows10-2004-x64

1

$0/Plugins...Ex.dll

windows7-x64

1

$0/Plugins...Ex.dll

windows10-2004-x64

1

$0/Plugins...el.dll

windows7-x64

1

$0/Plugins...el.dll

windows10-2004-x64

1

$0/Plugins/Zoom.dll

windows7-x64

1

$0/Plugins/Zoom.dll

windows10-2004-x64

1

$0/Plugins/aes.dll

windows7-x64

1

$0/Plugins/aes.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f44d743f980bb59e5cf76a7c9dff6391_JaffaCakes118

  • Size

    4.5MB

  • MD5

    f44d743f980bb59e5cf76a7c9dff6391

  • SHA1

    0ae3c2e1a49cb648b36a74748bba60d59f62d034

  • SHA256

    16a3cd9384c51df6e334a062f4dbc40c72b48484180d8d2a200605b63fd443f9

  • SHA512

    2905a87800b3dfde4967cbbe693f7304b379c75b4a14588c133467420f71ca2ac91e67cad44b3d3edfdafe0394294a36f844b86963252a0a8fc772ab4809a9ff

  • SSDEEP

    98304:3p/Fs4ASNbUqNfukpSTKq8yi5ZZCyRUim:3pG4JNbUgue0KrDbm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • f44d743f980bb59e5cf76a7c9dff6391_JaffaCakes118
    .rar
  • Aston_192_setup.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $0/Pictures/3dmax.ico
  • $0/Pictures/Afolder.ico
  • $0/Pictures/AltDesk.bmp
  • $0/Pictures/Aston.bmp
  • $0/Pictures/COMPUTER1.ani
  • $0/Pictures/Car.ico
  • $0/Pictures/Closed Folder.ico
  • $0/Pictures/FreeCell.ico
  • $0/Pictures/GLOBE.ANI
  • $0/Pictures/Hearts.ico
  • $0/Pictures/Help.ico
  • $0/Pictures/Install.bmp
  • $0/Pictures/Media Player.ico
  • $0/Pictures/Media Player1.ico
  • $0/Pictures/MineSweeper.ico
  • $0/Pictures/More.bmp
  • $0/Pictures/Open Folder.ico
  • $0/Pictures/Ppanel.bmp
  • $0/Pictures/SF.ico
  • $0/Pictures/Solitare.ico
  • $0/Pictures/Sound.ico
  • $0/Pictures/Thumbs.db
  • $0/Pictures/Uninst.bmp
  • $0/Pictures/Winzip.ico
  • $0/Pictures/Wordpad.ico
  • $0/Pictures/altdesk.ico
  • $0/Pictures/astonshell.ico
  • $0/Pictures/cnet.ico
  • $0/Pictures/deviantart.ico
  • $0/Pictures/excel.ico
  • $0/Pictures/fg.ico
  • $0/Pictures/firefox.ico
  • $0/Pictures/google.ico
  • $0/Pictures/icq.ico
  • $0/Pictures/illustrator.ico
  • $0/Pictures/ledit.ico
  • $0/Pictures/mail.ico
  • $0/Pictures/nero.ico
  • $0/Pictures/office.ani
  • $0/Pictures/outlook.ico
  • $0/Pictures/paint.ico
  • $0/Pictures/photoshop.ico
  • $0/Pictures/private.ico
  • $0/Pictures/sd1.ico
  • $0/Pictures/sd2.ico
  • $0/Pictures/tc.ico
  • $0/Pictures/thebat.ani
  • $0/Pictures/tucows.ico
  • $0/Pictures/wab.ico
  • $0/Pictures/winamp.ico
  • $0/Pictures/windvd.ico
  • $0/Pictures/winrar.ico
  • $0/Pictures/word.ico
  • $0/Plugins/AClock.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $0/Plugins/AstAmp.plg
    .dll windows:4 windows x86 arch:x86

    3dd8745c8725badb26763fe57c6c8a62


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/AutoRun.plg
    .dll windows:4 windows x86 arch:x86

    362c1cd92b004c6d2efbbb87d8c9e93a


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/Cpu95nt.tbp
    .dll windows:4 windows x86 arch:x86

    a528b69b38c33a00aa066dd1383d8133


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/DisksEx.plg
    .dll windows:4 windows x86 arch:x86

    230a043c1c773a983714577b38475b2d


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/MenuEx.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $0/Plugins/NOTEBOOK.DAT
  • $0/Plugins/NoteBk.tbp
    .dll windows:4 windows x86 arch:x86

    9783ff4a3a7bb51551bd84e98431bd01


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/Noteboo1.dat
  • $0/Plugins/Panel.plg
    .dll windows:4 windows x86 arch:x86

    f602ccf758998c10123bcb97964224aa


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/QLaunch.plg
    .dll windows:4 windows x86 arch:x86

    6c385b5fe68fe06fbbab74ca9f7ba675


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/RecycleBinEx.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $0/Plugins/Search.plg
    .dll windows:4 windows x86 arch:x86

    c88847e31f506a54c8dbd47f7f945f5b


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/SkinClckEx.plg
    .dll windows:4 windows x86 arch:x86

    5afcc30096819006b40d508583b1fbfe


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/VertPanel.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $0/Plugins/Zoom.tbp
    .dll windows:4 windows x86 arch:x86

    a79d8d20f36219eedb9ab554be099d26


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/aes.tbp
    .dll windows:4 windows x86 arch:x86

    6c8408bb5d7d5a5b75b9314f94e68763


    Headers

    Imports

    Exports

    Sections

  • $0/Plugins/aes_license.txt
  • $0/Plugins/cpuusage.vxd
  • $0/Themes/Aston Desktop.atz
    .zip .ps1 polyglot
  • AltDesk/Skin/Handy-metallic.ini
  • AltDesk/Skin/buttons.bmp
  • AltDesk/Skin/main.bmp
  • BarSkin.bmp
  • Config1024x768.tfa
  • Config1152x864.tfa
  • Config1280x1024.tfa
  • Config1600x1200.tfa
  • Config800x600.tfa
  • Fonts/Aston-f1.ttf
  • Icons/A-Astonshell.ANKz
    .zip
  • a-astonshell.ank
  • astonshell.bmp
  • Icons/A-Help.ANKz
    .zip
  • a-help.ank
  • help.bmp
  • Icons/A-Master.ANKz
    .zip
  • a-master.ank
  • master.bmp
  • Icons/A-SSwapper.ANKz
    .zip
  • a-sswapper.ank
  • sswapper.bmp
  • Icons/A-Thwizard.ANKz
    .zip
  • a-twizard.ank
  • twizard.bmp
  • Icons/Control Panel.ANKz
    .zip
  • control panel.ank
  • control panel.bmp
  • Icons/Find.ANKz
    .zip
  • Icons/Logoff.ANKz
    .zip
  • Icons/My computer.ANKz
    .zip
  • Icons/Mycomp.ANKz
    .zip
  • Icons/Panel1024.bmp
  • Icons/Panel1152.bmp
  • Icons/Panel1280.bmp
  • Icons/Panel1600.bmp
  • Icons/Panel800.bmp
  • Icons/Run.ANKz
    .zip
  • Icons/Screen Settings.ANKz
    .zip
  • Icons/Shut Down.ANKz
    .zip
  • Icons/recycle.ankz
    .zip
  • LeftTopSkin.bmp
  • Plugins/AL.png
    .png
  • Plugins/AR.png
    .png
  • Plugins/Clock-hands.bmp
  • Plugins/Clock.bmp
  • Plugins/calendar.png
    .png
  • Plugins/clockex.3pic
    .zip
  • Plugins/disks.png
    .png
  • Plugins/find1.ankz
    .zip
  • Plugins/left-flank.png
    .png
  • Plugins/mm-footer.bmp
  • Plugins/mm-item.bmp
  • Plugins/mm-select.bmp
  • Plugins/mm-separator.bmp
  • Plugins/mm-title.bmp
  • Plugins/q-launch-ico.bmp
  • Plugins/q-launch.3pic
    .zip
  • Plugins/right-flank.png
    .png
  • Plugins/search.3pic
    .zip
  • Plugins/topp-footer1.png
    .png
  • Plugins/topp-footer2.png
    .png
  • Plugins/topp-footer3.png
    .png
  • Plugins/topp-header.png
    .png
  • Plugins/topp-item1.png
    .png
  • Plugins/topp-item2.png
    .png
  • Plugins/topp-item3.png
    .png
  • Plugins/topp-separator.png
    .png
  • Plugins/topp-subitem1.png
    .png
  • Plugins/topp-subitem2.png
    .png
  • Plugins/topp-subitem3.png
    .png
  • Plugins/trash.png
    .png
  • RightTopSkin.bmp
  • Start1.ANKz
    .zip
  • TaskActi.3PIC
    .zip
  • TaskInac.3pic
    .zip
  • TaskMin.3pic
    .zip
  • ToolLeft.bmp
  • ToolRight.bmp
  • TrayIcon1.bmp
  • TrayIcon2.bmp
  • TraySkin.bmp
  • Wallpaper1280x1024.jpg
    .jpg
  • theme.jpg
    .jpg
  • $0/Themes/Aston XP.atz
    .zip
  • $0/Themes/Cios.atz
    .zip
  • $0/Themes/Makrom.atz
    .zip
  • $0/XP/indicdll.dll
    .dll windows:5 windows x86 arch:x86

    e849a4fb4c69e579ec1b546f9edc4a93


    Headers

    Imports

    Sections

  • $0/XP/internat.exe
    .exe windows:5 windows x86 arch:x86

    6ec4b9854181010bb09f30f0c6b36520


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a75ed4b57a83b633f5cb5d4939d72f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • A-Master.exe
    .exe .ps1 windows:1 windows x86 arch:x86 polyglot


    Headers

    Sections

  • Ainet.dll
    .dll windows:4 windows x86 arch:x86

    7714763c636d6dcf2ea00a54cfc834b6


    Headers

    Imports

    Exports

    Sections

  • Aston Trans Refresh.txt
  • Aston.chm
    .chm
  • Aston.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Aston.rc
  • AstonEx.dll
    .dll windows:4 windows x86 arch:x86

    36c278c1c2d0adcd185a0a27cb6f07c9


    Headers

    Imports

    Exports

    Sections

  • Desktop.ini
  • FAQ.htm
    .html
  • License.txt
  • Plugins.rc
  • PrintMon.exe
    .exe windows:4 windows x86 arch:x86

    98c6b35d3302369aed53f5c1a30f7bcc


    Headers

    Imports

    Sections

  • Readme.txt
  • SHDoctor.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ShellSwp.exe
    .exe windows:4 windows x86 arch:x86

    2652b531002af9867d64db549536d750


    Headers

    Imports

    Sections

  • Shswdos.exe
  • Skinning Tutorial.chm
    .chm
  • Starter.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Thwizard.dll
    .dll windows:4 windows x86 arch:x86

    2abe8826b95991103fbe6dd6a3e95a00


    Headers

    Imports

    Exports

    Sections

  • Thwizard.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Tips.rc
  • Whatsnew.htm
  • aHook.dll
    .dll windows:4 windows x86 arch:x86

    fd74a2843629e181becf5524f6b8a58f


    Headers

    Imports

    Exports

    Sections

  • drawpng.dll
    .dll windows:4 windows x86 arch:x86

    0e15f35169a7236de6c546c4dd8b5599


    Headers

    Imports

    Exports

    Sections

  • hook.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • lsapi.dll
    .dll windows:4 windows x86 arch:x86

    af6cad12466d61abb028e776eddc8acd


    Headers

    Imports

    Exports

    Sections

  • mmkbd.dll
    .dll windows:4 windows x86 arch:x86

    f9903b1c103680ccebfe99335e528652


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • HB-Aston192-jd.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot