Overview

overview

3

Static

static

3

16b682ee12...18.exe

windows7-x64

3

16b682ee12...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

HaoZip.chm

windows7-x64

1

HaoZip.chm

windows10-2004-x64

1

HaoZip.exe

windows7-x64

3

HaoZip.exe

windows10-2004-x64

3

HaoZipC.exe

windows7-x64

3

HaoZipC.exe

windows10-2004-x64

3

HaoZipLoader.exe

windows7-x64

1

HaoZipLoader.exe

windows10-2004-x64

1

HaoZipShell.dll

windows7-x64

1

HaoZipShell.dll

windows10-2004-x64

1

HaoZipUpdate.exe

windows7-x64

3

HaoZipUpdate.exe

windows10-2004-x64

3

lang/HaoZi...hs.dll

windows7-x64

3

lang/HaoZi...hs.dll

windows10-2004-x64

3

msvcr80.dll

windows7-x64

1

msvcr80.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    16b682ee12296be0f4db403fc8f56d36_JaffaCakes118

  • Size

    1.2MB

  • MD5

    16b682ee12296be0f4db403fc8f56d36

  • SHA1

    1bec8f62b06b83d35436c6b5341909d0c83b1210

  • SHA256

    1710cdbb5f9b9b5aa21371ed000bfa2cc747d61dfbba47142987abc885854c1d

  • SHA512

    ba6b1dffe54f6b0aed7c47f370272da3e6f05273b8a908a28b17f61e1409c4d137f31a2713a451a893c2f798844770f973c1b8edc5d0fa0d2a20335a0951931a

  • SSDEEP

    24576:SOqr4MjfT97L7oxtl1R8q2JgGsnTirs6b07bHmPa48qG0LZunq8XNId:SAmf5sxtl1R8JJg72XI7LmPaQG0kz9Id

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 16b682ee12296be0f4db403fc8f56d36_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/option.ini
  • 7zNew.data
    .7z
  • Benchmark.data
  • HaoZip.chm
    .chm
  • HaoZip.exe
    .exe windows:4 windows x86 arch:x86

    c51dd2ec7061241d0771ea482e2e1dda


    Headers

    Imports

    Sections

  • HaoZipC.exe
    .exe windows:4 windows x86 arch:x86

    0187e922614d6328579e4284cf5bd745


    Headers

    Imports

    Sections

  • HaoZipLoader.exe
    .exe windows:4 windows x86 arch:x86

    809ae753f9f1e103a08c521a2bb16a4c


    Headers

    Imports

    Sections

  • HaoZipShell.dll
    .dll windows:4 windows x86 arch:x86

    4005f392ba8cfc1228862a8ae3212e17


    Headers

    Imports

    Exports

    Sections

  • HaoZipUpdate.exe
    .exe windows:4 windows x86 arch:x86

    63e70110f0c2a62a835a6aa872efb043


    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • RarNew.data
    .rar
  • TarNew.data
  • ZipNew.data
  • lang/HaoZipLang_chs.dll
    .dll windows:4 windows x86 arch:x86

    d05906981f53157a7404d25bec1148ad


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 好压免责声明.txt