Overview

overview

3

Static

static

3

ASYCFILT.dll

windows7-x64

1

ASYCFILT.dll

windows10-2004-x64

1

COMCAT.dll

windows7-x64

1

COMCAT.dll

windows10-2004-x64

1

MCI32.dll

windows7-x64

1

MCI32.dll

windows10-2004-x64

1

MCICHS.dll

windows7-x64

1

MCICHS.dll

windows10-2004-x64

1

MSVBVM60.dll

windows7-x64

1

MSVBVM60.dll

windows10-2004-x64

1

MSVCRT.dll

windows7-x64

3

MSVCRT.dll

windows10-2004-x64

3

OLEAUT32.dll

windows7-x64

1

OLEAUT32.dll

windows10-2004-x64

1

OLEPRO32.dll

windows7-x64

1

OLEPRO32.dll

windows10-2004-x64

1

SCRRNCHS.dll

windows7-x64

1

SCRRNCHS.dll

windows10-2004-x64

1

SCRRUN.dll

windows7-x64

1

SCRRUN.dll

windows10-2004-x64

1

SETUP1.exe

windows7-x64

3

SETUP1.exe

windows10-2004-x64

3

ST6UNST.exe

windows7-x64

1

ST6UNST.exe

windows10-2004-x64

1

STDOLE2.dll

windows7-x64

1

STDOLE2.dll

windows10-2004-x64

1

VB6CHS.dll

windows7-x64

1

VB6CHS.dll

windows10-2004-x64

1

VB6STKIT.dll

windows7-x64

1

VB6STKIT.dll

windows10-2004-x64

1

browser_com.exe

windows7-x64

1

browser_com.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c8de6aeb20ba8f91dd90b83582c0908_JaffaCakes118

  • Size

    9.0MB

  • MD5

    2c8de6aeb20ba8f91dd90b83582c0908

  • SHA1

    48500a8ed49beac04f6fa9f73d5e8986252a15f5

  • SHA256

    1ee348b89e4f51863de19aada36ffac28f07afe624faf180427e549d182eb079

  • SHA512

    45cfbacaa7f975be90c39de4e1e72737068eaad90df45aa70ae6d87ee97af4a3f5f857bb559ce9b1c67d2b105aa5a1c3b221f016912c8f7cbc33d37a66317995

  • SSDEEP

    196608:nrJM/zgGu1KhZtta/yuoGGL+p/xZF+rDTqwXJwbPIMlTWhZ3+:nrJEVjf3a/XUap/XI7ZUp+R+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c8de6aeb20ba8f91dd90b83582c0908_JaffaCakes118
    .rar
  • Setup.Lst
  • main_ys1.CAB
    .cab
  • 900_1.dat
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    390ef37875e351d87137c1d1bddb9a0a


    Headers

    Imports

    Exports

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • MCI32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    13fa0cf96dc804ea3f3d2f71b1bcf4aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MCICHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    479485184984aadb89b6e8cf253117e6


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    354f0e4993e3e3b9ed42e25935d15ead


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5ccf8bf224eb9ec83fbb805c335d308


    Headers

    Imports

    Exports

    Sections

  • SCRRNCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SCRRUN.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    76c11ecf1003000e53224ed1abb74067


    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • VTXTAUTO.TLB
  • browser_com.exe
    .exe windows:4 windows x86 arch:x86

    154fc4f3d430a217523e78d9386055f3


    Headers

    Imports

    Sections

  • c1.dat
  • c2.dat
  • c3.dat
  • c4.dat
  • choose_ys.exe
    .exe windows:4 windows x86 arch:x86

    0cd8c7ca2787b571b7cd4243337b5479


    Headers

    Imports

    Sections

  • exam_com.exe
    .exe windows:4 windows x86 arch:x86

    5b0b17e799db70c3760be86154975b12


    Headers

    Imports

    Sections

  • juzi_com.exe
    .exe windows:4 windows x86 arch:x86

    218dab84a7455ab846805ae3daf541ad


    Headers

    Imports

    Sections

  • listentest_com.exe
    .exe windows:4 windows x86 arch:x86

    203f4f5e07581f7a5fb3fa40c9337498


    Headers

    Imports

    Sections

  • login.exe
    .exe windows:4 windows x86 arch:x86

    6706734ae035316cd980a16ae20f0545


    Headers

    Imports

    Sections

  • login.ini
  • main_ys1.exe
    .exe windows:4 windows x86 arch:x86

    9ee1573733a73a1ae5c1d866d0c27266


    Headers

    Imports

    Sections

  • write_com.exe
    .exe windows:4 windows x86 arch:x86

    5b0b17e799db70c3760be86154975b12


    Headers

    Imports

    Sections

  • mstts.exe
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Headers

    Imports

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • spchapi.exe
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Code Sign

    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 安装说明.txt