General

  • Target

    fcd6226623222076f8062c15db616e8d_JaffaCakes118

  • Size

    1.0MB

  • MD5

    fcd6226623222076f8062c15db616e8d

  • SHA1

    385bd87b121178b2fb5179932e114ae8675d4949

  • SHA256

    b34a4086fadb1920003b3a563deb3ced304fcd3cfc73d26926fcf185185f9c68

  • SHA512

    c642ab016ddd18a8de1930461fb0fae4a557d69026366f1c825d3fc4ac773b499d37fc1d552a5ad0478006996333f37b1c4c8decb64364312935381d47b10c0e

  • SSDEEP

    24576:tIU5ZZPY1jmgAjEt/snhJTdaPOvbItAmXrurVNWTVcl72C:CU1IAjEtCHaPOzIhrMG2

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 11 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • fcd6226623222076f8062c15db616e8d_JaffaCakes118
    .rar
  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Invoke.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SCMIS.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SMSC_Mis.mdb
  • charge.grd
  • commcom/charge.fox
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • commcom/class.fox
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • commcom/setup.fox
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • commcom/stu.fox
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • commcom/下载说明.htm
    .html .js polyglot
  • dataset.ini
  • iext.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • logo.jpg
    .jpg
  • odbcdb.run
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • xplib.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot