Overview

overview

8

Static

static

3

Setup.exe

windows7-x64

7

Setup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

BIN/WIN7.dll

windows7-x64

1

BIN/WIN7.dll

windows10-2004-x64

1

BIN/cjgh.exe

windows7-x64

1

BIN/cjgh.exe

windows10-2004-x64

1

BIN/cjgl.exe

windows7-x64

1

BIN/cjgl.exe

windows10-2004-x64

1

BIN/mad.bat

windows7-x64

8

BIN/mad.bat

windows10-2004-x64

8

BIN/update.exe

windows7-x64

1

BIN/update.exe

windows10-2004-x64

1

BIN/update_DATA.dll

windows7-x64

1

BIN/update_DATA.dll

windows10-2004-x64

1

TEMP/cjzh.exe

windows7-x64

1

TEMP/cjzh.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bc38130bff25cb94879d8cdcf81fec2_JaffaCakes118

  • Size

    327KB

  • MD5

    2bc38130bff25cb94879d8cdcf81fec2

  • SHA1

    59edf31f84ce6037cc416480fe065a474236bb25

  • SHA256

    b1b3d6651276f3513077328109073407f8789b32a31e753343551d7c9d1254f3

  • SHA512

    22ad08b55075a422e356f21ca3a0208b8fa098ed71b950c2f15bf591ec8be7b8c5680a8401c3dd4b8e87b127a6aa1be7711dcbc55a56c9cf24a626c206a9beca

  • SSDEEP

    6144:0vkqpG4VMUNaDGuGpNpBWtxCCg+XOMQdMr1rjQ7vrGHYmbLtaschx7BhWEMo:izemaDOTKxBHQdqFcYdascD7BJp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 2bc38130bff25cb94879d8cdcf81fec2_JaffaCakes118
    .rar
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BIN/C100D.ZDL
  • BIN/C120D.ZDL
  • BIN/C150D.ZDL
  • BIN/WIN7.ocx
    .dll regsvr32 windows:6 windows x86 arch:x86

    0143a0da3dfb1092f3a9895e75348e3a


    Headers

    Imports

    Exports

    Sections

  • BIN/cjgh.dll
    .exe windows:4 windows x86 arch:x86

    8ad98195bfea10a14ae3990a3364999a


    Headers

    Imports

    Sections

  • BIN/cjgl.exe
    .exe windows:4 windows x86 arch:x86

    cd01d9323f2f3992ed64dcbf11b551b6


    Headers

    Imports

    Sections

  • BIN/mad.bat
  • BIN/main.dat
  • BIN/regesiter.dat
  • BIN/update.exe
    .exe windows:4 windows x86 arch:x86

    75aa7604d64b699d7f77e79c15e03e1b


    Headers

    Imports

    Sections

  • BIN/update_DATA.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fb251c24262a8ced6d830dfdfd26b0fc


    Headers

    Imports

    Exports

    Sections

  • TEMP/cjzh.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TEMP/li.txt
  • TEMP/whatsnew.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • 新云软件.url
    .url