General

  • Target

    38942e83d64940129e0b9c970385a8c5_JaffaCakes118

  • Size

    2.1MB

  • MD5

    38942e83d64940129e0b9c970385a8c5

  • SHA1

    6b4e1fe7e5324ae86c297eb28555fe39a6858dac

  • SHA256

    8be410717226b5e873c61a30d92a767c6c6492ce6358cd79b2a41cb23dba05cd

  • SHA512

    a5bbb220be8df199426167bf409f9b37ac0809e19462a70e72197091cc608d99d8c2d391464a65b40724dbfe8af20d1dda24b3caf916602b6c49e4af10c8f780

  • SSDEEP

    49152:vXdq9BbkmdhSi783eRRi+CT1s4E6pdfXHZHoLhdkZ2Ed9Y6RI7:v49B90i4OfFCxumd8/+47

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 38942e83d64940129e0b9c970385a8c5_JaffaCakes118
    .rar
  • PersonMgrV108A/@注意事项@.txt
  • PersonMgrV108A/AdoRegister.exe
    .exe windows:4 windows x86 arch:x86

    4f2145f489d9c324280558d2e08c717d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAM_FILES_COMMON/Microsoft Shared/DAO/Dao350.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d249124e9bb3cd7ad1eff43913414080


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/MSCAL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    477e318c71b23a3694590b04947b255e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/MSJET35.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    fafbf34557833c1916cdad807ab2b231


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f9a6d48b4db89541699313524a5cdd4a


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    b0d3278f6dd8a1a715873c57aae39d31


    Headers

    Imports

    Exports

    Sections

  • PersonMgrV108A/DspJpgDll.dll
    .dll windows:4 windows x86 arch:x86

    c6a36748137604d930c3894932a2f0b7


    Headers

    Imports

    Exports

    Sections

  • PersonMgrV108A/GetIDESN.dll
    .dll windows:4 windows x86 arch:x86

    27dcc902cc72e7b2bfc4c4c50808d8f0


    Headers

    Imports

    Exports

    Sections

  • PersonMgrV108A/Person2.mdb
  • PersonMgrV108A/PersonMgr.exe
    .exe windows:4 windows x86 arch:x86

    b17c49fc10b9855c7b242d30a2bf7fe6


    Headers

    Imports

    Sections

  • PersonMgrV108A/PersonMgr.ini
  • PersonMgrV108A/PersonMgrHelp.chm
    .chm
  • PersonMgrV108A/Title.jpg
    .jpg
  • PersonMgrV108A/board.jpg
    .jpg
  • PersonMgrV108A/login.jpg
    .jpg
  • PersonMgrV108A/phrase.dat
  • PersonMgrV108A/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot