Overview

overview

7

Static

static

3

AsLocal_In...22.exe

windows7-x64

7

AsLocal_In...22.exe

windows10-2004-x64

7

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

NDSvr.exe

windows7-x64

1

NDSvr.exe

windows10-2004-x64

1

NetDisk.dll

windows7-x64

1

NetDisk.dll

windows10-2004-x64

1

ndmod/ndmod_115.dll

windows7-x64

1

ndmod/ndmod_115.dll

windows10-2004-x64

1

ndmod/ndmod_163.dll

windows7-x64

1

ndmod/ndmod_163.dll

windows10-2004-x64

1

ndmod/ndmod_qq.dll

windows7-x64

1

ndmod/ndmod_qq.dll

windows10-2004-x64

1

ndmod/ndmo...ve.dll

windows7-x64

1

ndmod/ndmo...ve.dll

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    244fa76b31e12e89faabce3c93f2b634_JaffaCakes118

  • Size

    504KB

  • MD5

    244fa76b31e12e89faabce3c93f2b634

  • SHA1

    b73ff291872a64f67723ad47dc90a977ae3495d9

  • SHA256

    a0b02ae9bdc6808aa06ae218f8c74fa9bcbdcc4e651d9cd24570bd6c05d71bcd

  • SHA512

    742954de9ee7f82ee1fb7df9911ace39ee933520dddad4cf4353d6058064f91077b775d96e82aebaf148a501a56b4d1b9d917670a67b1802fd1aad0187da9299

  • SSDEEP

    12288:qVG1MMz4z21Vcgj0k7s5cOwOzEYr3y08kmnUstZmD+7U:qVGjzV110GOw87ynnZfU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 244fa76b31e12e89faabce3c93f2b634_JaffaCakes118
    .rar
  • AsLocal_Inst_1.00.1022.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AlInst.dll
    .dll windows:4 windows x86 arch:x86

    464c40c78b5d6c8f67f6974eff161af1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • NDSvr.exe
    .exe windows:4 windows x86 arch:x86

    488e8161d16fbadd67b0960f19c54e06


    Headers

    Imports

    Sections

  • NetDisk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    547fc2bfc25353450a3affb677dc35b6


    Headers

    Imports

    Exports

    Sections

  • conf/AsLocal.propdesc
  • ndmod/ndmod_115.dll
    .dll windows:4 windows x86 arch:x86

    6c6aecd3eb6d40d07168f3b2239b4925


    Headers

    Imports

    Exports

    Sections

  • ndmod/ndmod_163.dll
    .dll windows:4 windows x86 arch:x86

    71b47702f4e0b979bb936d9526213a89


    Headers

    Imports

    Exports

    Sections

  • ndmod/ndmod_qq.dll
    .dll windows:4 windows x86 arch:x86

    f327b40f3eff1ecb26eee64ec6f65bcf


    Headers

    Imports

    Exports

    Sections

  • ndmod/ndmod_skydrive.dll
    .dll windows:4 windows x86 arch:x86

    c51b812f93f9317efdb84a7c874ae25a


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AlInst.dll
    .dll windows:4 windows x86 arch:x86

    464c40c78b5d6c8f67f6974eff161af1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • 新云软件.url
    .url