Overview

overview

7

Static

static

3

Main.exe

windows7-x64

1

Main.exe

windows10-2004-x64

1

Plus/Hash.exe

windows7-x64

1

Plus/Hash.exe

windows10-2004-x64

1

Plus/MpTools.exe

windows7-x64

1

Plus/MpTools.exe

windows10-2004-x64

1

Plus/Syste...ze.dll

windows7-x64

1

Plus/Syste...ze.dll

windows10-2004-x64

1

Plus/SystemScan.dll

windows7-x64

7

Plus/SystemScan.dll

windows10-2004-x64

7

Plus/clearmp.exe

windows7-x64

1

Plus/clearmp.exe

windows10-2004-x64

1

Plus/update.exe

windows7-x64

3

Plus/update.exe

windows10-2004-x64

3

Plus/新云软件.url

windows7-x64

1

Plus/新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f660fedb502adeed60e5949544d6dd1d_JaffaCakes118

  • Size

    1.9MB

  • MD5

    f660fedb502adeed60e5949544d6dd1d

  • SHA1

    b6efb7dabba57f9e9d5bd87a32a08833284ff333

  • SHA256

    fb851da6829c950ad8d82ab9335b8d2438951509b45319ae89ee76b0487ea75e

  • SHA512

    c92775182c7c859fe03f093229e315ee04657ea464617b42d4f0b8742e23f64eced1dba460345b6a4fdd6e788af25967792ceab08e46e04d52740e15bb24427f

  • SSDEEP

    49152:92gZ0cyJto2tLJ0IGU/I8hCQGTMyPuJW911OJgTOR65yxatlKoL:92gZOw7psyP2W9T+gl5yWlKoL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • f660fedb502adeed60e5949544d6dd1d_JaffaCakes118
    .rar
  • Main.exe
    .exe windows:5 windows x86 arch:x86

    cd65b59309e7a593caa53404bcc6df64


    Headers

    Imports

    Sections

  • Plus/Hash.dll
    .exe windows:5 windows x86 arch:x86

    012cf4addef7f42309c70bdbb1011147


    Headers

    Imports

    Sections

  • Plus/MpTools.dll
    .exe windows:5 windows x86 arch:x86

    e09842c56b226b46b1f6cc703349ae4f


    Headers

    Imports

    Sections

  • Plus/SystemOptimize.dll
    .dll windows:5 windows x86 arch:x86

    f070b324cfbe5890d48cedd3b750dd24


    Headers

    Imports

    Exports

    Sections

  • Plus/SystemScan.dll
    .dll windows:5 windows x86 arch:x86

    ee5a4867c5ce7226039eaf44df06815d


    Headers

    Imports

    Exports

    Sections

  • Plus/clearmp.dll
    .exe windows:4 windows x86 arch:x86

    ae07994b897151f321d460c5fbb78893


    Headers

    Imports

    Sections

  • Plus/update.dll
    .exe windows:5 windows x86 arch:x86

    698446aaf162bbc43b28d90aaacfd27f


    Headers

    Imports

    Sections

  • Plus/新云软件.url
    .url
  • cfg.ini