Errors

Reason
office: invalid record header

General

  • Target

    183ad70b4f5f7552fa14d0b7d3a62545_JaffaCakes118

  • Size

    11.1MB

  • MD5

    183ad70b4f5f7552fa14d0b7d3a62545

  • SHA1

    4a26d32306c1315fdf8748feb6a1a2ac59d8108f

  • SHA256

    cec9b57ddebf28394388971f4633f444daf9387e567315c25565bac8d93ccd83

  • SHA512

    442ff4949f87d516690f36405640c5a65cb6f060e546052dc7982e912c732f0f3d69eb3b990dc5dfea6db7547efcefb814702340b85136e496d8df12cb20a5b5

  • SSDEEP

    196608:tuGZf13D5rIRzn1DF3cKZXToUXrC0dX3s6P2HR5FWiNtQBwYI17BWY+0Cl04:tB1GRLcGXZdXZsJVkILbfClX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 72 IoCs

    Checks for missing Authenticode signature.

Files

  • 183ad70b4f5f7552fa14d0b7d3a62545_JaffaCakes118
    .rar
  • NETSETUP/SETUP1.CAB
    .cab
  • 12500852.CPX
  • 12510866.CPX
  • 12520437.CPX
  • 12520850.CPX
  • 12520860.CPX
  • 12520861.CPX
  • 12520863.CPX
  • 12520865.CPX
  • ACMSETUP.EXE
    .exe windows:1 windows x86 arch:x86

    d057661fa0c57da4e10eca58cdf1dc72


    Headers

    Imports

    Sections

  • ACMSETUP.HLP
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • BB.DBF
  • BB1.CDX
  • BB1.DBF
  • BB3.DBF
  • BB4.DBF
  • BH.DBF
  • BZ.DBF
  • BZ.IDX
  • BZ1.DBF
  • BZ1TEMP.DBF
  • BZER.CDX
  • BZER.DBF
  • BZER.IDX
  • BZIDX.IDX
  • CBJJ.DBF
  • CKMC.CDX
  • CKMC.DBF
  • COMCAT.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CONFIG.FPW
  • CPHX.CDX
  • CPHX.DBF
  • CPHX.IDX
  • CSZK.DBF
  • CZ1TEMP.DBF
  • CZR.DBF
  • DATE1.DBF
  • DBMSSOCN.DLL
    .dll windows:4 windows x86 arch:x86

    60bf5c14362265838e1e21a33756e0ff


    Headers

    Imports

    Exports

    Sections

  • DBNMPNTW.DLL
    .dll windows:4 windows x86 arch:x86

    b46bd05d5d17b4ee3fafc50105215f80


    Headers

    Imports

    Exports

    Sections

  • DJLB.DBF
  • DRVSSRVR.HLP
  • DRVVFP.CNT
  • DRVVFP.HLP
  • DS16GT.DLL
  • DS32GT.DLL
    .dll windows:4 windows x86 arch:x86

    858f18aa6ec07896d5a7264bf23e96f8


    Headers

    Imports

    Exports

    Sections

  • EW.DBF
  • EXPSRV.DLL
    .dll windows:4 windows x86 arch:x86

    9b44586762d75ceb27fe697f8904784f


    Headers

    Imports

    Exports

    Sections

  • FOXUSER.DBF
  • FOXUSER.FPT
  • FOXUSET.DBF
  • GR8409.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • GR8GALRY.GRA
    .gra .xls windows office2003
  • GRAPH8.EXE
    .exe windows:4 windows x86 arch:x86

    da1384a5e07008fd2da7f3016e3b7b35


    Headers

    Imports

    Exports

    Sections

  • GRAPH8.OLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • GRINTL32.DLL
    .dll windows:4 windows x86 arch:x86

    5c58e97b465189cebdb7d0daa8b67a90


    Headers

    Imports

    Exports

    Sections

  • Graph8rt.srg
  • HBSS.DBF
  • HBSS.IDX
  • HELP.CHM
    .chm
  • HELP.DBF
  • HELP.FPT
  • HELP.TBK
  • HJSJ.DBF
  • INSTCAT.SQL
    .vbs
  • JK1TEMP.DBF
  • JKHDE.CDX
  • JKHDE.DBF
  • JKHDE.IDX
  • JXCKM.DBF
  • JZ.CDX
  • JZ.DBF
  • JZBZ.DBF
  • JZBZ.FRT
  • JZBZ.FRX
  • JZSP.DBF
  • JZSPC.DBF
  • JZSPR.DBF
  • KHDE.CDX
  • KHDE.DBF
  • KHDE.IDX
  • KHDETEMP.DBF
  • KHZL.CDX
  • KJDATE.DBF
  • KM.DBF
  • KM.IDX
  • KMDE.CDX
  • KMDE.DBF
  • KMDESE.DBF
  • LCDN_APP.DBF
  • LRJXC.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • LRLFLCDN.DLL
    .dll windows:4 windows x86 arch:x86

    9f01c2237de99a1193c6567e5f61ca97


    Headers

    Imports

    Exports

    Sections

  • LYB.DBF
  • MRT7ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCAL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    477e318c71b23a3694590b04947b255e


    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCPXL32.DLL
    .dll windows:4 windows x86 arch:x86

    a26c05098a1289a6842368047ce0416b


    Headers

    Imports

    Exports

    Sections

  • MSDADC.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    ee777044b3a49f4c113f4273fda48a6c


    Headers

    Imports

    Exports

    Sections

  • MSDAENUM.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    90e3858fc29b55aeb3d93e2813109f2b


    Headers

    Imports

    Exports

    Sections

  • MSDAER.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e8161609d1f16c254c83e6d743cd9e9


    Headers

    Imports

    Exports

    Sections

  • MSDAERR.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSDAPS.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    b6669cfce2e24e5c259712b59ac62eb8


    Headers

    Imports

    Exports

    Sections

  • MSDASQL.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    53399d66246766c23ae28db26d6cd8a3


    Headers

    Imports

    Exports

    Sections

  • MSDASQLR.DLL
    .dll windows:4 windows x86 arch:x86

    47b95eaa8a92898962a601a6fb44ee48


    Headers

    Imports

    Sections

  • MSDASQ~1.TXT
  • MSDATL2.DLL
    .dll windows:4 windows x86 arch:x86

    ec249a1bc448e2935e64523a92bab1ed


    Headers

    Imports

    Exports

    Sections

  • MSDATT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a53f96866d2213afe73c54e15b91c63b


    Headers

    Imports

    Exports

    Sections

  • MSEXCL35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5ae86211ab3dcd66db1050704db9dca8


    Headers

    Imports

    Exports

    Sections

  • MSJET35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5a8f0c2c86e4873e3c76638a66d64d75


    Headers

    Imports

    Exports

    Sections

  • MSJINT35.DLL
    .dll windows:4 windows x86 arch:x86

    8ca2a6bee2fbfbab8621d081d904b4da


    Headers

    Imports

    Exports

    Sections

  • MSJTER35.DLL
    .dll windows:4 windows x86 arch:x86

    3bca76fb5ba89dcc243aedc87ac45dff


    Headers

    Imports

    Exports

    Sections

  • MSO97RT.DLL
    .dll windows:4 windows x86 arch:x86

    ba286078820cecc89030c075308d278e


    Headers

    Imports

    Exports

    Sections

  • MSORAC~1.TXT
  • MSORCL32.CNT
  • MSORCL32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f7e420ad8608fe10ea65f68b5e808621


    Headers

    Imports

    Exports

    Sections

  • MSORCL32.HLP
  • MSPDOX35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9be423840d3c6ec79476eff82c16d35b


    Headers

    Imports

    Exports

    Sections

  • MSRD2X35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a781de574e0567285ee1233bf6a57cc0


    Headers

    Imports

    Exports

    Sections

  • MSREPL35.DLL
    .dll windows:4 windows x86 arch:x86

    23bbd416b06ed5ae477309380d72aabe


    Headers

    Imports

    Sections

  • MSSETUP.DLL
    .dll windows:1 windows x86 arch:x86

    9f91a6d65da7fff6bdb420d66d40fac0


    Headers

    Imports

    Exports

    Sections

  • MSTEXT35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    7748e8fa654e294c0ddf2462d17f4674


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    f325e1ae915b98bc4702bb3efa8aea4a


    Headers

    Imports

    Exports

    Sections

  • MSVCRT40.DLL
    .dll windows:4 windows x86 arch:x86

    57259dcda30c27e977785c33a8441434


    Headers

    Imports

    Exports

    Sections

  • MTXDM.DLL
    .dll windows:5 windows x86 arch:x86

    c4c2325f4b3ad62aa64c1f0f57e38616


    Headers

    Imports

    Exports

    Sections

  • MTXOCI.DLL
    .dll windows:5 windows x86 arch:x86

    e118eefb8fbec13dd179189339671f08


    Headers

    Imports

    Exports

    Sections

  • NAMEPRNT.DBF
  • ODBC16GT.DLL
  • ODBC32.DLL
    .dll windows:4 windows x86 arch:x86

    1b320f2f0c53caf7456bd46bd256348d


    Headers

    Imports

    Exports

    Sections

  • ODBC32GT.DLL
    .dll windows:4 windows x86 arch:x86

    3269808d6ad98d50dfc5c81e1bebf55b


    Headers

    Imports

    Exports

    Sections

  • ODBCAD32.EXE
    .exe windows:4 windows x86 arch:x86

    726d8d1c60f1bc7886cc17405454c41f


    Headers

    Imports

    Sections

  • ODBCBCP.DLL
    .dll windows:4 windows x86 arch:x86

    8d7389578b00e17344c8d9ce4429ff7d


    Headers

    Imports

    Exports

    Sections

  • ODBCCONF.EXE
    .exe windows:4 windows x86 arch:x86

    8f97d1a08cbfd02e87219e8b5337827d


    Headers

    Imports

    Sections

  • ODBCCP32.CPL
    .dll windows:4 windows x86 arch:x86

    b16c320361bb62635edc4c97dc16cec6


    Headers

    Imports

    Exports

    Sections

  • ODBCCP32.DLL
    .dll windows:4 windows x86 arch:x86

    77f2eab0779cfb5ec38df646f7f073b9


    Headers

    Imports

    Exports

    Sections

  • ODBCCR32.DLL
    .dll windows:4 windows x86 arch:x86

    a4d316379409e82589229f431f1e4b2e


    Headers

    Imports

    Exports

    Sections

  • ODBCCU32.DLL
    .dll windows:4 windows x86 arch:x86

    fe2ed38f6b34efdb975ee6e7efabe5d5


    Headers

    Imports

    Exports

    Sections

  • ODBCINST.CNT
  • ODBCINST.HLP
  • ODBCINT.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ODBCJET.CNT
  • ODBCJET.HLP
  • ODBCJI32.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ODBCJT32.DLL
    .dll windows:4 windows x86 arch:x86

    175c585675d9cf58c1b4985d3c405ef4


    Headers

    Imports

    Exports

    Sections

  • ODBCTL32.DLL
    .dll windows:4 windows x86 arch:x86

    16439758327c98a76baa128de8b551b8


    Headers

    Imports

    Exports

    Sections

  • ODBCTRAC.DLL
    .dll windows:4 windows x86 arch:x86

    e4083d3b105b8c0f61605b97d22682d0


    Headers

    Imports

    Exports

    Sections

  • ODEXL32.DLL
    .dll windows:4 windows x86 arch:x86

    8a05a44c65a1c31ec87c0973f4a10082


    Headers

    Imports

    Exports

    Sections

  • ODPDX32.DLL
    .dll windows:4 windows x86 arch:x86

    8a05a44c65a1c31ec87c0973f4a10082


    Headers

    Imports

    Exports

    Sections

  • ODTEXT32.DLL
    .dll windows:4 windows x86 arch:x86

    8a05a44c65a1c31ec87c0973f4a10082


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    20de0b13751dfdb7f5be44c0f947b93a


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • PASS.DBF
  • PRINT1.DBF
  • QTJKZKP.FRT
  • QTJKZKP.FRX
  • QTZKCP.FRT
  • QTZKCP.FRX
  • SCP32.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SEBB.DBF
  • SEKM.DBF
  • SETUP2.LST
  • SPBH.CDX
  • SPBH.DBF
  • SPBH.IDX
  • SQLSODBC.HLP
  • SQLSRDME.TXT
  • SQLSRV32.DLL
    .dll windows:4 windows x86 arch:x86

    2aed64d0991f716bab4e7db03d38d35c


    Headers

    Imports

    Exports

    Sections

  • SSHX.DBF
  • SSHX.IDX
  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TEMPHX.DBF
  • TEMPPRNT.DBF
  • TEMPSJ.CDX
  • TEMPSJ.DBF
  • TEMPZK.DBF
  • TEMPZKC.CDX
  • TEMPZKC.DBF
  • TEMPZKCD.CDX
  • TEMPZKCD.DBF
  • TEMPZKCD.IDX
  • TEMPZKCP.CDX
  • TEMPZKCP.DBF
  • TEMPZKP.DBF
  • TEMPZKPP.FRT
  • TEMPZKPP.FRX
  • TEMPZK~1.FRT
  • TEMPZK~1.FRX
  • TZKCP3.FRT
  • TZKCP3.FRX
  • TZKCP3D.FRT
  • TZKCP3D.FRX
  • TZKCP3T.FRT
  • TZKCP3T.FRX
  • TZKCP3TB.FRT
  • TZKCP3TB.FRX
  • TZKPPD.FRT
  • TZKPPD.FRX
  • VBAJET32.DLL
    .dll windows:4 windows x86 arch:x86

    8e4cca56f88f6d206aa5a20cdaf1a0c8


    Headers

    Imports

    Exports

    Sections

  • VBAME.DLL
    .dll windows:4 windows x86 arch:x86

    b6c19feada628c72f3f392a69b2fee7c


    Headers

    Imports

    Exports

    Sections

  • VBAR332.DLL
    .dll windows:4 windows x86 arch:x86

    5e14d7670f11f0d91651943101ee9e7f


    Headers

    Imports

    Exports

    Sections

  • VFP6R.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5980ed470e407cb5f29a5787bb80355


    Headers

    Imports

    Exports

    Sections

  • VFP6RCHS.DLL
    .dll windows:4 windows x86 arch:x86

    105a34c3b3ecaf6803be201e74c83cf4


    Headers

    Imports

    Exports

    Sections

  • VFP6RENU.DLL
    .dll windows:4 windows x86 arch:x86

    105a34c3b3ecaf6803be201e74c83cf4


    Headers

    Imports

    Exports

    Sections

  • VFPODBC.DLL
    .dll windows:4 windows x86 arch:x86

    c6be2ddb3fa0c9c9c989619fe0dfd971


    Headers

    Imports

    Exports

    Sections

  • VFPODBC.TXT
  • WINDBVER.EXE
    .exe windows:4 windows x86 arch:x86

    133920d15d1c227166476a5c577a7a63


    Headers

    Imports

    Sections

  • WIZSET32.DLL
    .dll windows:4 windows x86 arch:x86

    a6ddee4715543289a7e54b780402c0c5


    Headers

    Imports

    Exports

    Sections

  • ZK.DBF
  • ���񱨱�.XLS
    .xls windows office2003
  • �����û�.XLS
    .xls windows office2003
  • ������~1.TXT
  • NETSETUP/odbckey.inf
  • NETSETUP/odbcstf.dll
    .dll windows:4 windows x86 arch:x86

    33fa7ded9bb1e257c02160cf3f709998


    Headers

    Imports

    Exports

    Sections

  • NETSETUP/setup.exe
  • NETSETUP/setup.inf
  • NETSETUP/setup.ini
  • NETSETUP/setup.lst
  • NETSETUP/setup.stf
  • NETSETUP/setup.tdf
  • NETSETUP/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot