Overview

overview

7

Static

static

3

hjzg_2678.exe

windows7-x64

7

hjzg_2678.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$SYSDIR/hjjm.dll

windows7-x64

6

$SYSDIR/hjjm.dll

windows10-2004-x64

6

help/about1.htm

windows7-x64

1

help/about1.htm

windows10-2004-x64

1

help/aboutme.htm

windows7-x64

1

help/aboutme.htm

windows10-2004-x64

1

help/anzhuang.htm

windows7-x64

1

help/anzhuang.htm

windows10-2004-x64

1

help/cipan.htm

windows7-x64

1

help/cipan.htm

windows10-2004-x64

1

help/huanjing.htm

windows7-x64

1

help/huanjing.htm

windows10-2004-x64

1

help/index.htm

windows7-x64

1

help/index.htm

windows10-2004-x64

1

help/jiami.htm

windows7-x64

1

help/jiami.htm

windows10-2004-x64

1

help/jiemi.htm

windows7-x64

1

help/jiemi.htm

windows10-2004-x64

1

help/lqa.htm

windows7-x64

1

help/lqa.htm

windows10-2004-x64

1

help/qa.htm

windows7-x64

1

help/qa.htm

windows10-2004-x64

1

help/set.htm

windows7-x64

1

help/set.htm

windows10-2004-x64

1

help/sousuo.htm

windows7-x64

1

help/sousuo.htm

windows10-2004-x64

1

help/support.htm

windows7-x64

1

help/support.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    37a52b6172c338b4444c73daef95446b_JaffaCakes118

  • Size

    1.1MB

  • MD5

    37a52b6172c338b4444c73daef95446b

  • SHA1

    8123ec3df0a593519b91687b7f0d24014d2a10bd

  • SHA256

    d7f16910423f47d3e6c6268b63dcca01bc0822bb918de56118cdf7ad9aa82433

  • SHA512

    26d2a039866f65de17f292c27f7c82bc8d6ad9c99ac720a30cf06cd3d5e0ca0c5a93d999f8606cf21d78990c7a50e104c9a46b7e9b0ec24468823e106c485625

  • SSDEEP

    24576:0iZBy2VgqsRGXI4r4haRK1EANumQqBTnBJcV6jBDlHbynreV:0iZB+q6jFQRrcR9lHbyn6V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 37a52b6172c338b4444c73daef95446b_JaffaCakes118
    .rar
  • hjzg_2678.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/hjjm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f4fe55365e41f3220ab49f7351fb39c0


    Headers

    Imports

    Exports

    Sections

  • 888.ico
  • help/WS_FTP.LOG
  • help/about1.htm
    .html
  • help/aboutme.htm
    .html
  • help/anzhuang.htm
    .html
  • help/cipan.htm
    .html
  • help/help/images/WS_FTP.LOG
  • help/help/images/arrow_02.gif
    .gif
  • help/help/images/cipan.bmp
  • help/help/images/cipan2.bmp
  • help/help/images/cipan3.bmp
  • help/help/images/ddd.bmp
  • help/help/images/gg.PNG
    .png
  • help/help/images/gg2.PNG
    .png
  • help/help/images/hjtools.png
    .png
  • help/help/images/i_bg.gif
    .gif
  • help/help/images/i_kbot.gif
    .gif
  • help/help/images/i_ktop.gif
    .gif
  • help/help/images/imqq4_footer_02.gif
    .gif
  • help/help/images/imqq4_logo.gif
    .gif
  • help/help/images/imqq4_top01_03.gif
    .gif
  • help/help/images/imqq4_top02_06.gif
    .gif
  • help/help/images/index.1.jpg
    .jpg
  • help/help/images/index_splash.png
    .png
  • help/help/images/jia_passwd.bmp
  • help/help/images/jiami.bmp
  • help/help/images/jiami2.JPG
    .jpg
  • help/help/images/jiemi.bmp
  • help/help/images/left_01.gif
    .gif
  • help/help/images/left_03.gif
    .gif
  • help/help/images/left_04.gif
    .gif
  • help/help/images/left_04_aw.gif
    .gif
  • help/help/images/left_06.gif
    .gif
  • help/help/images/left_06_aw.gif
    .gif
  • help/help/images/left_bg_02.gif
    .gif
  • help/help/images/left_line_01.gif
    .gif
  • help/help/images/logo.gif
    .gif
  • help/help/images/right_top_03.gif
    .gif
  • help/help/images/weizhuang.bmp
  • help/huanjing.htm
    .html
  • help/index.htm
    .html
  • help/jiami.htm
    .html
  • help/jiemi.htm
    .html
  • help/lqa.htm
    .html
  • help/qa.htm
    .html
  • help/set.htm
    .html
  • help/sousuo.htm
    .html
  • help/support.htm
    .html
  • help/weizhuang.htm
    .html
  • help/xieyi.htm
    .html
  • help/xiezai.htm
    .html
  • help/ģ.htm
    .html .js polyglot
  • hjtools_menu.dll.ico
  • hjzg.exe
    .exe windows:4 windows x86 arch:x86

    cdac3a7c53a4e2ad96889e782ee6c914


    Headers

    Imports

    Sections

  • mengku_ft.dat
  • mengku_ft_tree.dat
  • mengku_gb.dat
  • mengku_gb_tree.dat
  • param.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86

    466f63bb96b599a59a72dfc20d5f02de


    Headers

    Imports

    Sections

  • 新云软件.url
    .url