Overview

overview

6

Static

static

3

vb/59r.com...��.exe

windows7-x64

6

vb/59r.com...��.exe

windows10-2004-x64

6

vb/code/vq....).exe

windows7-x64

vb/code/vq....).exe

windows10-2004-x64

vb/pro1/�...�1.exe

windows7-x64

1

vb/pro1/�...�1.exe

windows10-2004-x64

1

vb/qqq.com...sy.exe

windows7-x64

1

vb/qqq.com...sy.exe

windows10-2004-x64

3

vb/qqq.com...y1.exe

windows7-x64

3

vb/qqq.com...y1.exe

windows10-2004-x64

3

vb/vqqq.co...��.exe

windows7-x64

1

vb/vqqq.co...��.exe

windows10-2004-x64

3

vb/vqqq.co...��.exe

windows7-x64

1

vb/vqqq.co...��.exe

windows10-2004-x64

1

vb/vqqq.co...t1.exe

windows7-x64

1

vb/vqqq.co...t1.exe

windows10-2004-x64

3

vb/vqqq自....).exe

windows7-x64

1

vb/vqqq自....).exe

windows10-2004-x64

1

vb/vqqq雪...��.exe

windows7-x64

1

vb/vqqq雪...��.exe

windows10-2004-x64

1

vb/关机r...na.exe

windows7-x64

1

vb/关机r...na.exe

windows10-2004-x64

1

vb/扫雷.exe

windows7-x64

1

vb/扫雷.exe

windows10-2004-x64

1

vb/标ti/工程1.exe

windows7-x64

1

vb/标ti/工程1.exe

windows10-2004-x64

1

vb/热建.exe

windows7-x64

1

vb/热建.exe

windows10-2004-x64

1

052512691/...p3.exe

windows7-x64

6

052512691/...p3.exe

windows10-2004-x64

6

052512691/...��.exe

windows7-x64

1

052512691/...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3418a9bc48af38ddd5c03a2d9a97e113_JaffaCakes118

  • Size

    350KB

  • MD5

    3418a9bc48af38ddd5c03a2d9a97e113

  • SHA1

    493eed45388de18c9d97313bfe28f3b88a8d5f74

  • SHA256

    5c964935153ae8c6da1af29cd49d3abcc4345684b44927411b1ec4c815385516

  • SHA512

    81a4f5418658f941d63edb855dbe06855bf53154e1f39b96e1fc0822126273dee7cb713655039f103221fb7e1663c489509a69aa9ccbd17aaed99fc862895ceb

  • SSDEEP

    6144:W3vaOJ9N71nLfkP2bHAFKl6EovpLjecFFx0MKRbcATPdSFZzA9/9dEhehUJ151:AvaaN71nrgkHykRe5je00M8bLFSFJAjc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 3418a9bc48af38ddd5c03a2d9a97e113_JaffaCakes118
    .rar
  • 052512691/tool.rar
    .rar
  • vb/59r.com_CD播放器.exe
    .exe windows:4 windows x86 arch:x86

    ffc3b524e4f59b41f002ea0ebcec1ea3


    Headers

    Imports

    Sections

  • vb/code/59r.com cd.vbp
  • vb/code/59r.com cd.vbw
  • vb/code/MSSCCPRJ.SCC
  • vb/code/SNOW.VBP
  • vb/code/SNOW.vbw
  • vb/code/vqqq自动取款机 (A.T.M.).VBP
  • vb/code/vqqq自动取款机 (A.T.M.).exe
  • vb/code/vqqq自动取款机 (A.T.M.).frx
  • vb/code/vqqq自动取款机 (A.T.M.).vbw
  • vb/code/扫雷/扫雷.vbp
  • vb/code/扫雷/扫雷.vbw
  • vb/code1/Form mov.vbp
  • vb/code1/Form mov.vbw
  • vb/code1/MSSCCPRJ.SCC
  • vb/pro1/死机/死机1.exe
    .exe windows:4 windows x86 arch:x86

    19d05037b2c50ae34239b7edca8ea5b8


    Headers

    Imports

    Sections

  • vb/pro1/死机/死机1.vbp
  • vb/pro1/死机/死机1.vbw
  • vb/qqq.com程序注册表编辑器/AddEasy.exe
    .exe windows:4 windows x86 arch:x86

    c7d78d07b836f55bcc9b44b4fae23e8d


    Headers

    Imports

    Sections

  • vb/qqq.com程序注册表编辑器/AddEasy.ini
  • vb/qqq.com程序注册表编辑器/AddEasy1.exe
    .exe windows:4 windows x86 arch:x86

    c7d78d07b836f55bcc9b44b4fae23e8d


    Headers

    Imports

    Sections

  • vb/qqq.com程序注册表编辑器/AddMune.vbp
  • vb/qqq.com程序注册表编辑器/AddMune.vbw
  • vb/qqq.com程序注册表编辑器/MSSCCPRJ.SCC
  • vb/qqq.com程序注册表编辑器/Project1.vbw
  • vb/vqqq.com五子棋____联系电话 0774--7682617,联系email [email protected] 联系QQ：6439358/MSSCCPRJ.SCC
  • vb/vqqq.com五子棋____联系电话 0774--7682617,联系email [email protected] 联系QQ：6439358/五子棋.exe
    .exe windows:4 windows x86 arch:x86

    d45ea5a01f9fc42faee7ca99b9ada635


    Headers

    Imports

    Sections

  • vb/vqqq.com五子棋____联系电话 0774--7682617,联系email [email protected] 联系QQ：6439358/五子棋.vbp
  • vb/vqqq.com五子棋____联系电话 0774--7682617,联系email [email protected] 联系QQ：6439358/五子棋.vbw
  • vb/vqqq.com屏幕捕捉器/vqqq.com屏幕捕捉器.exe
    .exe windows:4 windows x86 arch:x86

    7234a08fa2999206c04335c37bf7eede


    Headers

    Imports

    Sections

  • vb/vqqq.com屏幕捕捉器/vqqq.com屏幕捕捉器t1.vbp
  • vb/vqqq.com屏幕捕捉器/vqqq.com屏幕捕捉器t1.vbw
  • vb/vqqq.com系统信息查寻器，可以查出当前系统/Project1.exe
    .exe windows:4 windows x86 arch:x86

    e6edbeac01162b048977bf769a9da874


    Headers

    Imports

    Sections

  • vb/vqqq.com系统信息查寻器，可以查出当前系统/Project1.vbp
  • vb/vqqq.com系统信息查寻器，可以查出当前系统/Project1.vbw
  • vb/vqqq自动取款机 (A.T.M.).exe
    .exe windows:4 windows x86 arch:x86

    815c27a79d0fda256603d6047d803241


    Headers

    Imports

    Sections

  • vb/vqqq雪夜屏保器.exe
    .exe windows:4 windows x86 arch:x86

    a45af6108748e41b0ef07d8f8a8eaa10


    Headers

    Imports

    Sections

  • vb/关机rejing/BigChina.exe
    .exe windows:4 windows x86 arch:x86

    5188e3c95e2e9332f59020f192fc33d2


    Headers

    Imports

    Sections

  • vb/关机rejing/BigChina.vbp
  • vb/关机rejing/BigChina.vbw
  • vb/扫雷.EXE
    .exe windows:4 windows x86 arch:x86

    8dc1eabd2c774f191d1a35a6f53633db


    Headers

    Imports

    Sections

  • vb/标ti/工程1.exe
    .exe windows:4 windows x86 arch:x86

    6091ea533f36b7eee5e0af90fee32bb4


    Headers

    Imports

    Sections

  • vb/标ti/工程1.vbp
  • vb/标ti/工程1.vbw
  • vb/热建.exe
    .exe windows:4 windows x86 arch:x86

    f162f82f6f780a83beeff8b5c18ad2d4


    Headers

    Imports

    Sections

  • vb/热建.vbp
  • vb/热建.vbw
  • vb/程序说明.txt
  • 052512691/下载说明.htm
    .html .js polyglot
  • 052512691/复件 vb/mp3/mp3.exe
    .exe windows:4 windows x86 arch:x86

    10cd661ada6ab69898aa5a7ed80d41b3


    Headers

    Imports

    Sections

  • 052512691/复件 vb/mp3/mp3.vbp
  • 052512691/复件 vb/mp3/mp3.vbw
  • 052512691/复件 vb/mp3/vqqq.com.txt
  • 052512691/复件 vb/paint/87q.com画图之王.exe
    .exe windows:4 windows x86 arch:x86

    8c43a31cce25df7e3c4d38cc61942c01


    Headers

    Imports

    Sections

  • 052512691/复件 vb/paint/MSSCCPRJ.SCC
  • 052512691/复件 vb/paint/SEKPaint.vbp
  • 052512691/复件 vb/paint/SEKPaint.vbw
  • 052512691/复件 vb/paint/vqqq.com.txt
  • 052512691/复件 vb/paint/vqqq.comPaint.exe
    .exe windows:4 windows x86 arch:x86

    48b2be7d1e3c910a703eb9831240c7c3


    Headers

    Imports

    Sections