Overview

overview

3

Static

static

3

posHtsetup...OM.dll

windows7-x64

1

posHtsetup...OM.dll

windows10-2004-x64

1

posHtsetup...lJ.exe

windows7-x64

3

posHtsetup...lJ.exe

windows10-2004-x64

3

posHtsetup...eJ.dll

windows7-x64

1

posHtsetup...eJ.dll

windows10-2004-x64

1

posHtsetup...ak.vbs

windows7-x64

1

posHtsetup...ak.vbs

windows10-2004-x64

1

posHtsetup...ll.dll

windows7-x64

1

posHtsetup...ll.dll

windows10-2004-x64

1

posHtsetup/bantam.dll

windows7-x64

3

posHtsetup/bantam.dll

windows10-2004-x64

3

posHtsetup/blw32.dll

windows7-x64

3

posHtsetup/blw32.dll

windows10-2004-x64

3

posHtsetup...mm.dll

windows7-x64

1

posHtsetup...mm.dll

windows10-2004-x64

1

posHtsetup...nt.dll

windows7-x64

1

posHtsetup...nt.dll

windows10-2004-x64

1

posHtsetup/gbak.exe

windows7-x64

1

posHtsetup/gbak.exe

windows10-2004-x64

1

posHtsetup/gds32.dll

windows7-x64

1

posHtsetup/gds32.dll

windows10-2004-x64

1

posHtsetup...32.dll

windows7-x64

1

posHtsetup...32.dll

windows10-2004-x64

1

posHtsetup...32.dll

windows7-x64

1

posHtsetup...32.dll

windows10-2004-x64

1

posHtsetup...32.dll

windows7-x64

1

posHtsetup...32.dll

windows10-2004-x64

1

posHtsetup/iddr32.dll

windows7-x64

1

posHtsetup/iddr32.dll

windows10-2004-x64

1

posHtsetup...32.dll

windows7-x64

1

posHtsetup...32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d9ea377b98933b28a6f2228435e70ea_JaffaCakes118

  • Size

    7.9MB

  • MD5

    6d9ea377b98933b28a6f2228435e70ea

  • SHA1

    c63187a6c1f2b0759f3ba229642084c9eeaf627d

  • SHA256

    6add4bc453a182ff03da3b6d4316d6a57c31e34dfdd368ded0e9942bce4c49c2

  • SHA512

    f62a55b4cf1e49d22c2f31968c4664af6001cc9efc78913c030cb4add77c0131fda7b0d9f399be6e872f8500d38e86d79cea1832c65d441fe992996f7870925a

  • SSDEEP

    196608:m30bEt0ihEPWC2EOdIGXe0tHSJb77PWqcDni1j6x+Rj:1EXQ7OU0tHUH7PWjj/Yj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d9ea377b98933b28a6f2228435e70ea_JaffaCakes118
    .rar
  • posHtsetup/API_COM.DLL
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/BSSerJ.bs
  • posHtsetup/BSSerialJ.exe
    .exe windows:4 windows x86 arch:x86

    9e3882686ad30713a68f74fb96958736


    Headers

    Imports

    Sections

  • posHtsetup/Barcode.DB
  • posHtsetup/LicenseJ.dll
    .dll windows:4 windows x86 arch:x86

    464b84b7ba4bcacd04ed8fb8869ca123


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/MYJXC.FDB
  • posHtsetup/Myjxcbak
    .vbs
  • posHtsetup/ShareDll.dll
    .dll windows:4 windows x86 arch:x86

    b5e30b83a943b8f5e8122f08c3030c47


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/bantam.dll
    .dll windows:1 windows x86 arch:x86

    302e92a8b022643b516e70240a11b811


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/blw32.dll
    .dll windows:1 windows x86 arch:x86

    13d686cae91936e0544fbb42d1855ce5


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/borlndmm.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/btjj.DB
  • posHtsetup/ceeurope.btl
  • posHtsetup/cfgx.DB
  • posHtsetup/charset.cvb
  • posHtsetup/classify.DB
  • posHtsetup/cwsc.DB
  • posHtsetup/cxyr.db
  • posHtsetup/ddbill.DB
  • posHtsetup/ddledgr.DB
  • posHtsetup/europe.btl
  • posHtsetup/fareast.btl
  • posHtsetup/fbclient.dll
    .dll windows:4 windows x86 arch:x86

    27606f3cf1827cae815bd1edd1e9ac87


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/fkjl.db
  • posHtsetup/gbak.exe
    .exe windows:4 windows x86 arch:x86

    61abe5252ca111b1eba5b54f4a807afa


    Headers

    Imports

    Sections

  • posHtsetup/gds32.dll
    .dll windows:4 windows x86 arch:x86

    27606f3cf1827cae815bd1edd1e9ac87


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/goods.DB
  • posHtsetup/gx.txt
  • posHtsetup/hygx.DB
  • posHtsetup/idapi32.dll
    .dll regsvr32 windows:1 windows x86 arch:x86

    ac24d2585411ea8a1d33653136dd11ed


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/idasci32.dll
    .dll windows:1 windows x86 arch:x86

    57ac17ffa6e59c018c8adc81b300e43f


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/idbat32.dll
    .dll windows:1 windows x86 arch:x86

    a00ace465fd40f41da8cdf77cb078645


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/iddr32.dll
    .dll windows:1 windows x86 arch:x86

    ceddaa60de44e811575d1fb0298ed438


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/idpdx32.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/idqbe32.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/idr20009.dll
    .dll windows:1 windows x86 arch:x86

    ca7840dd8b852014c2f3a1872f9911d7


    Headers

    Imports

    Exports

    Sections

  • posHtsetup/idsql32.dll
    .dll regsvr32 windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/inbill.DB
  • posHtsetup/inledgr.DB
  • posHtsetup/japan.btl
  • posHtsetup/kuctzjl.DB
  • posHtsetup/lrmx.DB
  • posHtsetup/lrtj.DB
  • posHtsetup/mu.ini
  • posHtsetup/myd1.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd10.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd11.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd12.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd2.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd3.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd4.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd5.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd6.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd7.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/myd8.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • posHtsetup/oter.ini
  • posHtsetup/outbill.DB
  • posHtsetup/outledgr.DB
  • posHtsetup/pd.DB
  • posHtsetup/posdemo.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • posHtsetup/posht.exe
    .exe windows:1 windows x86 arch:x86

    663e6885dd9d730956b1c84a197a7daf


    Headers

    Imports

    Sections

  • posHtsetup/setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • posHtsetup/shdj.db
  • posHtsetup/tj.DB
  • posHtsetup/tmbledgr.DB
  • posHtsetup/tmdd.DB
  • posHtsetup/tmgoods.DB
  • posHtsetup/tmi.DB
  • posHtsetup/tmi1.DB
  • posHtsetup/tmi2.DB
  • posHtsetup/tmi3.DB
  • posHtsetup/tmi4.DB
  • posHtsetup/tmi5.DB
  • posHtsetup/tmjxcbb.DB
  • posHtsetup/tmkc.DB
  • posHtsetup/tmkcs.DB
  • posHtsetup/tmmsfjl.DB
  • posHtsetup/tmo.DB
  • posHtsetup/tmo1.DB
  • posHtsetup/tmo2.DB
  • posHtsetup/tmo3.DB
  • posHtsetup/tmo4.DB
  • posHtsetup/tmo5.DB
  • posHtsetup/tmpd.DB
  • posHtsetup/tmsfjl.DB
  • posHtsetup/tmsybb.db
  • posHtsetup/tmtm.DB
  • posHtsetup/tmtmdy.DB
  • posHtsetup/tmxstj.DB
  • posHtsetup/tmxstj0.DB
  • posHtsetup/tmysyfzb.db
  • posHtsetup/usa.btl
  • posHtsetup/user.ini
  • posHtsetup/userkey.DB
  • posHtsetup/vender.DB
  • posHtsetup/vipbill.DB
  • posHtsetup/vipzl.DB
  • posHtsetup/xl.db
  • posHtsetup/晓君软件.doc
    .doc windows office2003