Overview

overview

3

Static

static

3

91412342/D...��.exe

windows7-x64

1

91412342/D...��.exe

windows10-2004-x64

1

91412342/Form1.vbs

windows7-x64

1

91412342/Form1.vbs

windows10-2004-x64

1

91412342/Form2.vbs

windows7-x64

1

91412342/Form2.vbs

windows10-2004-x64

1

91412342/S...r3.vbs

windows7-x64

1

91412342/S...r3.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d6029f0e8b5017e64c2b719e1c61a03_JaffaCakes118

  • Size

    30KB

  • MD5

    0d6029f0e8b5017e64c2b719e1c61a03

  • SHA1

    7134281ab8563d628da9e71449580a0f55f11ddc

  • SHA256

    1034346922c2c48dc699812af4ba35c683a0af6c323ed3518dc9852af687d69c

  • SHA512

    669dcc7e2927359a6c0e6d49d883b2a3cbc5ec88ac449bf80a99925fc12ee1da0c997a610279312896997dc5562c2c63a4eeebe510a5862a2655ce9b7037fe7b

  • SSDEEP

    768:lCJqYKeotHG/irSriyFjeZ8uGXn9YQa4Wa8W:lCwDzJGarSW18uGX9YQa4qW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d6029f0e8b5017e64c2b719e1c61a03_JaffaCakes118
    .rar
  • 91412342/Clientmsg.txt
  • 91412342/DXB聊天室.exe
    .exe windows:4 windows x86 arch:x86

    6650ec515de8585c5bef4441ffc1a6ca


    Headers

    Imports

    Sections

  • 91412342/Form1.frm
    .vbs
  • 91412342/Form1.frx
  • 91412342/Form2.frm
    .vbs
  • 91412342/Form2.frx
  • 91412342/MSSCCPRJ.SCC
  • 91412342/Module1.bas
  • 91412342/Servermsg.txt
  • 91412342/SetServer1.frm
  • 91412342/SetServer1.frx
  • 91412342/SetServer2.frm
  • 91412342/SetServer2.frx
  • 91412342/SetServer3.frm
    .vbs
  • 91412342/SetServer3.frx
  • 91412342/login.frm
  • 91412342/login.frx
  • 91412342/splash.frm
  • 91412342/splash.frx
  • 91412342/下载说明.htm
    .html .js polyglot
  • 91412342/工程1.vbp
  • 91412342/工程1.vbw