Overview

overview

7

Static

static

3

AutoFireWa...ll.exe

windows7-x64

1

AutoFireWa...ll.exe

windows10-2004-x64

1

AutoFireWa...ce.dll

windows7-x64

1

AutoFireWa...ce.dll

windows10-2004-x64

3

AutoFireWa...py.exe

windows7-x64

1

AutoFireWa...py.exe

windows10-2004-x64

1

AutoFireWa...ok.dll

windows7-x64

1

AutoFireWa...ok.dll

windows10-2004-x64

1

AutoFireWa...tp.dll

windows7-x64

3

AutoFireWa...tp.dll

windows10-2004-x64

3

AutoFireWa...ge.dll

windows7-x64

1

AutoFireWa...ge.dll

windows10-2004-x64

1

AutoFireWa...te.exe

windows7-x64

3

AutoFireWa...te.exe

windows10-2004-x64

7

AutoFireWa...TL.dll

windows7-x64

1

AutoFireWa...TL.dll

windows10-2004-x64

1

AutoFireWa...ef.dll

windows7-x64

3

AutoFireWa...ef.dll

windows10-2004-x64

3

AutoFireWa...er.chm

windows7-x64

1

AutoFireWa...er.chm

windows10-2004-x64

1

AutoFireWa...��.chm

windows7-x64

1

AutoFireWa...��.chm

windows10-2004-x64

1

AutoFireWa...��.chm

windows7-x64

1

AutoFireWa...��.chm

windows10-2004-x64

1

AutoFireWa...��.url

windows7-x64

1

AutoFireWa...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    330f398b03b07a19918548879d2c76a8_JaffaCakes118

  • Size

    2.2MB

  • MD5

    330f398b03b07a19918548879d2c76a8

  • SHA1

    6c8cb83d39b18000ac334bc107a8b2486538df4e

  • SHA256

    83ce60348e07ef8e60a78b4954b90859584495ffc77fff3de3a2e1045499c0c2

  • SHA512

    788c8bdfe57c7a07732a6292028c5e123365eae5f944cb74e36a053754dfdbe60b4769a20e1e671e5223ecc4abf4f88860d3a3e9a1beb1e77c1d33b270c3ee24

  • SSDEEP

    49152:fzPMS/GjcSwWh4aSlGqMX1HMU1/RhBA9T0BkOTfsGim8DdstZR:bPx/GoSwWhZSUfJXcASOonm8DdstL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 330f398b03b07a19918548879d2c76a8_JaffaCakes118
    .rar
  • AutoFireWall_701_20101107/AlphaOS.ssk
  • AutoFireWall_701_20101107/AquaOS.ssk
  • AutoFireWall_701_20101107/AutoFireWall.exe
    .exe windows:4 windows x86 arch:x86

    6b143b5c8ea4f0b94cb86309bdc8bac8


    Headers

    Imports

    Sections

  • AutoFireWall_701_20101107/AutoWarn.wav
  • AutoFireWall_701_20101107/Devoir.ssk
  • AutoFireWall_701_20101107/Dogmax.ssk
  • AutoFireWall_701_20101107/Dogmax2.ssk
  • AutoFireWall_701_20101107/FauxS-Toon.ssk
  • AutoFireWall_701_20101107/Language.ini
  • AutoFireWall_701_20101107/RedCopper.ssk
  • AutoFireWall_701_20101107/RemoveDevice.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AutoFireWall_701_20101107/SinoCopy.exe
    .exe windows:4 windows x86 arch:x86

    a06648525b64579f0e50afd5444e6852


    Headers

    Imports

    Sections

  • AutoFireWall_701_20101107/SinoHook.dll
    .dll windows:4 windows x86 arch:x86

    6cba59b39c434c02762a3adc70af6337


    Headers

    Imports

    Exports

    Sections

  • AutoFireWall_701_20101107/SinoHttp.dll
    .dll windows:4 windows x86 arch:x86

    eaacf09a5630e0703fdb7d9cac9c744e


    Headers

    Imports

    Exports

    Sections

  • AutoFireWall_701_20101107/SinoLanguage.dll
    .dll windows:4 windows x86 arch:x86

    18f804254730c7b0d2a2ae50928a7540


    Headers

    Imports

    Exports

    Sections

  • AutoFireWall_701_20101107/SinoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    195b481dddbe644ee7b862463bb6ab1f


    Headers

    Imports

    Sections

  • AutoFireWall_701_20101107/SkinPPWTL.dll
    .dll windows:4 windows x86 arch:x86

    8415b02065effcf3e8ba3b1c65054435


    Headers

    Imports

    Exports

    Sections

  • AutoFireWall_701_20101107/Spring.ssk
  • AutoFireWall_701_20101107/VirusDef.dll
    .dll windows:4 windows x86 arch:x86

    410f828dcd69df72bf449d94b5ceba77


    Headers

    Imports

    Exports

    Sections

  • AutoFireWall_701_20101107/XP-Home.ssk
  • AutoFireWall_701_20101107/[AFW]UpdateKeys.txt
  • AutoFireWall_701_20101107/[AFW]UserGuider.chm
    .chm
  • AutoFireWall_701_20101107/[AFW]使用說明.chm
    .chm
  • AutoFireWall_701_20101107/[AFW]使用说明.chm
    .chm
  • AutoFireWall_701_20101107/[AFW]更新說明.txt
  • AutoFireWall_701_20101107/[AFW]更新说明.txt
  • AutoFireWall_701_20101107/下载说明.txt
  • AutoFireWall_701_20101107/新云软件.url
    .url