General

  • Target

    17e93a0e9220cc3271550e921b7cbdd7_JaffaCakes118

  • Size

    4.0MB

  • MD5

    17e93a0e9220cc3271550e921b7cbdd7

  • SHA1

    749e30e7b469ecf6816d0cec563d9914e0df72e5

  • SHA256

    4bea5d7b035af332299f068daf2de39cf77abea5642c4b73a81aea0d754e753b

  • SHA512

    900d2c88f33aa024c3c9a62304631c33825298e0f2ffc54918ddcd175597b34c3a7241b1369ea13fafb0576136a033038676e435a9ed795eb7d740ceee8c7422

  • SSDEEP

    98304:871SP00b2Db98+dqK2ctrLSifImt1JWywgL9R:8Rs4DbddRrOifltjbwgJR

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 17e93a0e9220cc3271550e921b7cbdd7_JaffaCakes118
    .rar
  • Windows小秘书1.3/AlarmClockSound/AlarmClock.mp3
  • Windows小秘书1.3/PixOS.ssk
    .zip
  • PixOS.uis
  • pixosClassicHelpButton.tga
  • pixosClassicMinButton.tga
  • pixosHelpButton.tga
  • pixosMenuBackground1.bmp
  • pixosMenuBarBack.bmp
  • pixosMenuBarItem.bmp
  • pixosProgressBar.bmp
  • pixosWindowFrameBottomUis2.bmp
  • pixosWindowFrameLeftUis2.bmp
  • pixosWindowFrameRightUis2.bmp
  • pixosWindowFrameTopUis2.bmp
  • pixoscheckboxnew.tga
  • pixosclassicclosebutton.tga
  • pixosclassicclosebuttonglyph.bmp
  • pixosclassicmaxbutton.tga
  • pixosclassicmaxbuttonglyph.bmp
  • pixosclassicrestorebutton.tga
  • pixosclassicrestorebuttonglyph.bmp
  • pixosclosetoolbutton.tga
  • pixosclosetoolbuttonglyph.bmp
  • pixoscomboboxdropdownbutton.bmp
  • pixoscomboboxdropdownglyph.tga
  • pixosextraimages.bmp
  • pixosgroupboxedge.bmp
  • pixoslistviewheader.bmp
  • pixosmdibuttonsuis1.bmp
  • pixosmenubackground.bmp
  • pixosmenuitem.tga
  • pixospushbutton.tga
  • pixosradiobuttonnew.tga
  • pixosrebar.bmp
  • pixosrebargripper.bmp
  • pixosscrollbararrows.bmp
  • pixosscrollbararrowsglyph.bmp
  • pixosscrollbarshafthorz.bmp
  • pixosscrollbarshaftvert.bmp
  • pixosscrollbarthumbbtnhorz.bmp
  • pixosscrollbarthumbbtnvert.bmp
  • pixosspinupdownhorizontal.bmp
  • pixosspinupdownhorizontalglyph.bmp
  • pixosspinupdownvertical.bmp
  • pixosspinupdownverticalglyph.bmp
  • pixosstatusbar.bmp
  • pixosstatuspane.bmp
  • pixossunkedge.bmp
  • pixostabitem.tga
  • pixostabitem_bottom.tga
  • pixostableft.tga
  • pixostabpane.bmp
  • pixostabpane_bottom.bmp
  • pixostabpane_left.bmp
  • pixostabpane_right.bmp
  • pixostabright.tga
  • pixostoolbarbutton.tga
  • pixostrackbarthumbdown.tga
  • pixostrackbarthumbhorz.tga
  • pixostrackbarthumbleft.tga
  • pixostrackbarthumbright.tga
  • pixostrackbarthumbup.tga
  • pixostrackbarthumbvert.tga
  • pixostrackbartrack.bmp
  • pixostrackbartrackvert.bmp
  • pixoswindowframetoolcaption.bmp
  • pixoswindowframetoolhorizontal.bmp
  • pixoswindowframetoolvertical.bmp
  • pixoswindowmincaption.bmp
  • Windows小秘书1.3/ProductInfo.dll
    .dll windows:4 windows x86 arch:x86

    75c9da2a69774aff9d523302feda7dd3


    Headers

    Imports

    Exports

    Sections

  • Windows小秘书1.3/RubbishClear.bat
  • Windows小秘书1.3/SkinPPBCB.dll
    .dll windows:4 windows x86 arch:x86

    eaacb33cbfb37513e5642306fffe0c1a


    Headers

    Imports

    Exports

    Sections

  • Windows小秘书1.3/TimeSound/0.wav
  • Windows小秘书1.3/TimeSound/1.wav
  • Windows小秘书1.3/TimeSound/10.wav
  • Windows小秘书1.3/TimeSound/11.wav
  • Windows小秘书1.3/TimeSound/12.wav
  • Windows小秘书1.3/TimeSound/2.wav
  • Windows小秘书1.3/TimeSound/3.wav
  • Windows小秘书1.3/TimeSound/30.wav
  • Windows小秘书1.3/TimeSound/4.wav
  • Windows小秘书1.3/TimeSound/5.wav
  • Windows小秘书1.3/TimeSound/6.wav
  • Windows小秘书1.3/TimeSound/7.wav
  • Windows小秘书1.3/TimeSound/8.wav
  • Windows小秘书1.3/TimeSound/9.wav
  • Windows小秘书1.3/TimeSound/AM0.wav
  • Windows小秘书1.3/TimeSound/AM1.wav
  • Windows小秘书1.3/TimeSound/EM.wav
  • Windows小秘书1.3/TimeSound/MIN.wav
  • Windows小秘书1.3/TimeSound/PM.wav
  • Windows小秘书1.3/TimeSound/POINT.wav
  • Windows小秘书1.3/TimeSound/TIMENOW.wav
  • Windows小秘书1.3/WindowsHelper.exe
    .exe windows:4 windows x86 arch:x86

    d24d02fb39ae25bb92b66b72b8dabfa8


    Headers

    Imports

    Exports

    Sections

  • Windows小秘书1.3/Windows小秘书官方网站.url
  • Windows小秘书1.3/iehome.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Windows小秘书1.3/使用指南.html
    .html
  • Windows小秘书1.3/新云软件.url
    .url