General

  • Target

    5011268856558aea1cdc6be002e2b91e_JaffaCakes118

  • Size

    1.0MB

  • MD5

    5011268856558aea1cdc6be002e2b91e

  • SHA1

    4bdbee8389c7624b82fd6f148038cb89a38128e1

  • SHA256

    487faf186beef2eac690148b9fff85708bb1dbeca89bcfa71bfdf18095a346af

  • SHA512

    f03b5b5bf0a95ef5a3c78ebaa61cb4d2b390df869a4377d0c787e9c336cbd6f04c7ac06f072ec2884c03a8a50ba0907fef08ece8e93ba7345b51ccbe240ff5a0

  • SSDEEP

    24576:odOhZLChK4NMRRCZFstthfCG0Azn3oC9ocC+U5/mStzMa6zEqisT1:odkZqK4MiPirfb0AzVO+A/jtJ2EHs1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 5011268856558aea1cdc6be002e2b91e_JaffaCakes118
    .zip
  • cftyfzhq/BaiSeJianYue.she
  • cftyfzhq/COMCTL32.OCX.exe
    .exe windows:4 windows x86 arch:x86

    daebd096a1da05044ceff2776ad68267


    Headers

    Imports

    Sections

  • cftyfzhq/SkinH.bas
  • cftyfzhq/SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cftyfzhq/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86

    5b234a1aba7588c195b2279c948d550c


    Headers

    Imports

    Exports

    Sections

  • cftyfzhq/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cftyfzhq/cf体验服转换器v2.0.exe
    .exe windows:4 windows x86 arch:x86

    d10b5befd95cc7ad4907ac20edc90fbf


    Headers

    Imports

    Sections

  • cftyfzhq/skinh.she
  • cftyfzhq/东坡下载.url
    .url
  • cftyfzhq/东坡下载说明.txt