Overview

overview

10

Static

static

3

1408_cn_V8...er.exe

windows7-x64

3

1408_cn_V8...er.exe

windows10-2004-x64

10

1408_cn_V8...er.exe

windows7-x64

3

1408_cn_V8...er.exe

windows10-2004-x64

10

1408_cn_V8...VR.exe

windows7-x64

3

1408_cn_V8...VR.exe

windows10-2004-x64

10

1408_cn_V8...lt.htm

windows7-x64

7

1408_cn_V8...lt.htm

windows10-2004-x64

1

1408_cn_V8...de.exe

windows7-x64

3

1408_cn_V8...de.exe

windows10-2004-x64

3

1408_cn_V8...ew.dll

windows7-x64

1

1408_cn_V8...ew.dll

windows10-2004-x64

1

1408_cn_V8...ew.exe

windows7-x64

3

1408_cn_V8...ew.exe

windows10-2004-x64

10

1408_cn_V8...rs.exe

windows7-x64

3

1408_cn_V8...rs.exe

windows10-2004-x64

10

1408_cn_V8...up.exe

windows7-x64

3

1408_cn_V8...up.exe

windows10-2004-x64

10

1408_cn_V8...20.sys

windows7-x64

1

1408_cn_V8...20.sys

windows10-2004-x64

1

1408_cn_V8...oo.exe

windows7-x64

3

1408_cn_V8...oo.exe

windows10-2004-x64

10

1408_cn_V8...lp.chm

windows7-x64

1

1408_cn_V8...lp.chm

windows10-2004-x64

1

1408_cn_V8...er.exe

windows7-x64

1

1408_cn_V8...er.exe

windows10-2004-x64

10

1408_cn_V8...��.doc

windows7-x64

4

1408_cn_V8...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53e8aef7fecc2ce5921a730c58941532_JaffaCakes118

  • Size

    5.8MB

  • MD5

    53e8aef7fecc2ce5921a730c58941532

  • SHA1

    1c3bab5f783f897c4297ea55be97b583dd86878f

  • SHA256

    4f5c33b54a841bae7acb0e8216de5120a5b068ac60cfd158eca260d1f83cf067

  • SHA512

    51ada2e1c38412874e6a283db36a74f25bab08f007996d4c290aeeb41397bb67ab8c21d1c519dcd7f3942fae2f31e996069f24a8e2f13eba2c1661f3fbfe74b4

  • SSDEEP

    98304:mcWduY6v2hONLQc4+8o7O+JPu0jMH6pLTYsfR9F/gwOh40wLZAQlaUCEIIGS:mcWdL6vWORQcp81+Rv7BTnNo8FLSQlU+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 53e8aef7fecc2ce5921a730c58941532_JaffaCakes118
    .rar
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/AUTORUN.INF
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVP/Net Player.exe
    .exe windows:4 windows x86 arch:x86

    23042d7c6ee4120f4b97a572e4863a2d


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVP/dvrnet.ini
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR Player.exe
    .exe windows:4 windows x86 arch:x86

    9a63fc3c3ac5c152db685ead58774550


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR.ico
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/DVR.exe
    .exe windows:4 windows x86 arch:x86

    a482ec6e6d3de6c8178f77f11bfe8267


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/Logo.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/Warning.wav
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/default.htm
    .html
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/dvr.ini
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/dvr_caption.ini
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/encode.exe
    .exe windows:4 windows x86 arch:x86

    dcf0a08907902a786e91059de62f1214


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/logo70.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/logo71.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/novideo.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/unvisible.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/wait.bmp
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/webview.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f981dcd1366e7806b812822b1ab0d16


    Headers

    Imports

    Exports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVR/webview.exe
    .exe windows:4 windows x86 arch:x86

    bc5ce990cf54f8d435a68eb97512f73e


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/InstallDrivers.exe
    .exe windows:4 windows x86 arch:x86

    9a1bd1f4309351ac80c53eed29d25d36


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/Setup.exe
    .exe windows:4 windows x86 arch:x86

    8cb1edf12688652e8cf5f0c2c0eb778e


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/driver/cx25820.inf
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/driver/cx25820.sys
    .sys windows:4 windows x86 arch:x86

    d974a91a13df15604b99134a1a75ac39


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/foo.exe
    .exe windows:4 windows x86 arch:x86

    72d9fda7cc5f00aed1aa0508313dff66


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/help.chm
    .chm
  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/merger.exe
    .exe windows:4 windows x86 arch:x86

    fa8871a4510113324ddf83b32ec9e95b


    Headers

    Imports

    Sections

  • 1408_cn_V8.3.0.0/1408_cn_8.3.0.0/常见问题解决方法.doc
    .doc windows office2003