General

  • Target

    0d2b005a9bcef4a5e167c74d6a498b10_JaffaCakes118

  • Size

    11.7MB

  • MD5

    0d2b005a9bcef4a5e167c74d6a498b10

  • SHA1

    1c97f62e5c59120191a32175dde2d874f485e383

  • SHA256

    8c53325ba00034bdd0565a1be81dc43683749f34fc9891c1b57fd34e715237ab

  • SHA512

    600ee4594f00bb6767bd05c13001c326db40a62745bdad71f69e3d098285d209cc71e11285e6029d75ad8c043c3c5cb0275760f4c0681e172ce210ef539d88e7

  • SSDEEP

    196608:NdDaKWwDDLCRamyDPbGE0Uvuf7nMVD+TU8glHA6rhUQmkMzmqxy3bh0xS:qzwDnCRGD3qnM6glHBUQmXzmr3bhAS

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d2b005a9bcef4a5e167c74d6a498b10_JaffaCakes118
    .rar
  • SETUP.LST
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    4159a9ccafdc9e418bec02d791aa5942


    Headers

    Imports

    Sections

  • xGz.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • Actbar2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    de529dc0922d6d48487e801a4804c624


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • DAO350.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf0f003e4c43de60a9f823abcbacb132


    Headers

    Imports

    Exports

    Sections

  • FLXGDCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MDAC_TYP.EXE
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Code Sign

    Headers

    Imports

    Sections

  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSFLXGRD.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    11eea53ea81b7d299e5a61db777d2725


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSJET35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    c201c30ce762f60892c7c901aa462205


    Headers

    Imports

    Exports

    Sections

  • MSJINT35.DLL
    .dll windows:4 windows x86 arch:x86

    8ca2a6bee2fbfbab8621d081d904b4da


    Headers

    Imports

    Exports

    Sections

  • MSJTER35.DLL
    .dll windows:4 windows x86 arch:x86

    3bca76fb5ba89dcc243aedc87ac45dff


    Headers

    Imports

    Exports

    Sections

  • MSRD2X35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a781de574e0567285ee1233bf6a57cc0


    Headers

    Imports

    Exports

    Sections

  • MSREPL35.DLL
    .dll windows:4 windows x86 arch:x86

    f04a7d446e6c5d675167e675909f61c8


    Headers

    Imports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    f583a53985668060aed820e29de94793


    Headers

    Imports

    Exports

    Sections

  • MSVCRT40.DLL
    .dll windows:4 windows x86 arch:x86

    57259dcda30c27e977785c33a8441434


    Headers

    Imports

    Exports

    Sections

  • MSXBSE35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    17ff000d489ab80fc558ff76f6479938


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • P1024.jpg
    .jpg
  • P640.jpg
    .jpg
  • P800.jpg
    .jpg
  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    5946fd983925428aae7317d5d4322237


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB5DB.DLL
    .dll windows:4 windows x86 arch:x86

    2824fcddda9a05ec563c0e7037537798


    Headers

    Imports

    Exports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • Wage32.chm
    .chm
  • comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • expsrv.dll
    .dll windows:4 windows x86 arch:x86

    548d9bb3cc3953486c58d739eb336b48


    Headers

    Imports

    Exports

    Sections

  • hh.exe
    .exe windows:5 windows x86 arch:x86

    9ed54609127a70e312733e0fe986dabe


    Headers

    Imports

    Sections

  • hhctrl.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    402d5581598a74e1f8cff2fe291612f9


    Headers

    Imports

    Exports

    Sections

  • itircl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    7a860f8b2102e5515470e62fd84d5f33


    Headers

    Imports

    Exports

    Sections

  • itss.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    331068f8dad5b7516bb0961b65c4ae9e


    Headers

    Imports

    Exports

    Sections

  • mscomct2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    71e4dc10f7cc0c7bb2b43714bb9f46c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • scrrnchs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • scrrun.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bca884b4afc80c860d8f651c1327bfa9


    Headers

    Imports

    Exports

    Sections

  • show.AVI
  • vbajet32.dll
    .dll windows:4 windows x86 arch:x86

    8e4cca56f88f6d206aa5a20cdaf1a0c8


    Headers

    Imports

    Exports

    Sections

  • xGz.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • xGzHelp.chm
    .chm
  • 下载说明.htm
    .html .js polyglot