Overview

overview

6

Static

static

3

xlbbqmrj/C...ar.dll

windows7-x64

1

xlbbqmrj/C...ar.dll

windows10-2004-x64

1

xlbbqmrj/RCX12A.exe

windows7-x64

6

xlbbqmrj/RCX12A.exe

windows10-2004-x64

1

xlbbqmrj/cncnv.dll

windows7-x64

1

xlbbqmrj/cncnv.dll

windows10-2004-x64

1

xlbbqmrj/dp1.dll

windows7-x64

1

xlbbqmrj/dp1.dll

windows10-2004-x64

3

xlbbqmrj/eAPI.dll

windows7-x64

1

xlbbqmrj/eAPI.dll

windows10-2004-x64

1

xlbbqmrj/iext.dll

windows7-x64

1

xlbbqmrj/iext.dll

windows10-2004-x64

1

xlbbqmrj/iext2.dll

windows7-x64

1

xlbbqmrj/iext2.dll

windows10-2004-x64

1

xlbbqmrj/internet.dll

windows7-x64

1

xlbbqmrj/internet.dll

windows10-2004-x64

1

xlbbqmrj/kernel32.dll

windows7-x64

1

xlbbqmrj/kernel32.dll

windows10-2004-x64

1

xlbbqmrj/krnln.dll

windows7-x64

1

xlbbqmrj/krnln.dll

windows10-2004-x64

1

xlbbqmrj/shell.dll

windows7-x64

1

xlbbqmrj/shell.dll

windows10-2004-x64

1

xlbbqmrj/spec.dll

windows7-x64

1

xlbbqmrj/spec.dll

windows10-2004-x64

1

xlbbqmrj/wininet.dll

windows7-x64

1

xlbbqmrj/wininet.dll

windows10-2004-x64

1

xlbbqmrj/�...��.exe

windows7-x64

6

xlbbqmrj/�...��.exe

windows10-2004-x64

5

xlbbqmrj/�...��.doc

windows7-x64

4

xlbbqmrj/�...��.doc

windows10-2004-x64

1

xlbbqmrj/�...zp.exe

windows7-x64

1

xlbbqmrj/�...zp.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    71b391e127c94e0cce7fc68462b565b4_JaffaCakes118

  • Size

    6.1MB

  • MD5

    71b391e127c94e0cce7fc68462b565b4

  • SHA1

    04897656d7075e03e1084d86de895c668964c52d

  • SHA256

    74c1b2770fba853e40bd68d5618894bb322f8dbddf46eea3e77ce2a291c0143e

  • SHA512

    35b5e7b584d0b5fad3fb18f8cf79a8bc18dac86407c738fcb0835bdfad0a0cf257fb7b0a9dbb672fe0228faf78f7342f0c9c30d61274de85b45c69dfdd89fdfd

  • SSDEEP

    98304:yOvt82ATdshojmypgJuKU3SUalZ/YpbVu6S/9EY6VbTUpa+iwTqEuQKSTkOoC1S:yEAOhi0u3olZARVnUKbYpa+JuvSTnS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 71b391e127c94e0cce7fc68462b565b4_JaffaCakes118
    .rar
  • xlbbqmrj/CnCalendar.fne
    .dll windows:4 windows x86 arch:x86

    40e53c4191ba6b79c193870dc2ab08e6


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/RCX12A.tmp
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • xlbbqmrj/Skin/QQ2009.she
  • xlbbqmrj/Skin/QQ2009_宽_底边.she
  • xlbbqmrj/Skin/QQ2009_窄_底边.she
  • xlbbqmrj/Skin/XP系统色.she
  • xlbbqmrj/Skin/Xenes.she
  • xlbbqmrj/Skin/enjoy.she
  • xlbbqmrj/Skin/hlong.she
  • xlbbqmrj/Skin/homestead.she
  • xlbbqmrj/Skin/insomnia.she
  • xlbbqmrj/Skin/itunes.she
  • xlbbqmrj/Skin/longhorn.she
  • xlbbqmrj/Skin/ouframe.she
  • xlbbqmrj/Skin/pixos.she
  • xlbbqmrj/Skin/qq2008.she
  • xlbbqmrj/Skin/royale.she
  • xlbbqmrj/Skin/storm音影.she
  • xlbbqmrj/Skin/vista.she
  • xlbbqmrj/Skin/whitefire.she
  • xlbbqmrj/Skin/wish.she
  • xlbbqmrj/Skin/仿MSN.she
  • xlbbqmrj/Skin/仿QQ影音.she
  • xlbbqmrj/Skin/仿REAL.she
  • xlbbqmrj/Skin/仿office2007.she
  • xlbbqmrj/Skin/仿qqgame.she
  • xlbbqmrj/Skin/四方平板.she
  • xlbbqmrj/Skin/按钮平行.she
  • xlbbqmrj/Skin/木质色.she
  • xlbbqmrj/Skin/标题黄.she
  • xlbbqmrj/Skin/清纯淡蓝.she
  • xlbbqmrj/Skin/炫绿色.she
  • xlbbqmrj/Skin/精典黑.she
  • xlbbqmrj/Skin/纯VISTA.she
  • xlbbqmrj/Skin/纹条色.she
  • xlbbqmrj/cncnv.fne
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/kernel32
    .dll windows:5 windows x86 arch:x86

    437d147ea3f4a34fff9ac2110441696a


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/wininet.dll
    .dll windows:5 windows x86 arch:x86

    4eaf96aeeebf7735e59897702aee9c4f


    Headers

    Imports

    Exports

    Sections

  • xlbbqmrj/zm.fne
  • xlbbqmrj/zw.fne
  • xlbbqmrj/响亮取名软件18.03版本.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • xlbbqmrj/响亮取名软件使用前必读.doc
    .doc windows office2003
  • xlbbqmrj/响亮宝宝取名软件.zp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • xlbbqmrj/响亮宝宝取名软件使用前必读.doc
    .doc windows office2003
  • xlbbqmrj/河源下载站-cngr.cn.url
    .url
  • xlbbqmrj/注册机.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • xlbbqmrj/注意事项.doc
    .doc windows office2003
  • xlbbqmrj/淘宝热卖.url
    .url