Overview

overview

7

Static

static

3

Aston.1.9.5.exe

windows7-x64

7

Aston.1.9.5.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

A-Master.exe

windows7-x64

6

A-Master.exe

windows10-2004-x64

1

Ainet.dll

windows7-x64

3

Ainet.dll

windows10-2004-x64

3

Aston.chm

windows7-x64

1

Aston.chm

windows10-2004-x64

1

Aston.exe

windows7-x64

6

Aston.exe

windows10-2004-x64

1

AstonEx.dll

windows7-x64

3

AstonEx.dll

windows10-2004-x64

3

FAQ.htm

windows7-x64

1

FAQ.htm

windows10-2004-x64

1

Plugins/AClock.dll

windows7-x64

1

Plugins/AClock.dll

windows10-2004-x64

1

Plugins/AltDesk.dll

windows7-x64

1

Plugins/AltDesk.dll

windows10-2004-x64

1

Plugins/AstAmp.dll

windows7-x64

1

Plugins/AstAmp.dll

windows10-2004-x64

1

Plugins/AutoRun.dll

windows7-x64

1

Plugins/AutoRun.dll

windows10-2004-x64

1

Plugins/Cpu95nt.dll

windows7-x64

1

Plugins/Cpu95nt.dll

windows10-2004-x64

1

Plugins/DisksEx.dll

windows7-x64

1

Plugins/DisksEx.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0bccbda344f5670678aebd73c56f9f_JaffaCakes118

  • Size

    3.9MB

  • MD5

    3a0bccbda344f5670678aebd73c56f9f

  • SHA1

    f0c9f410ba850783dbe0f6e8da40b9acecad705c

  • SHA256

    14f8b8ca319489e895f972f52282241c631f2c1ca87f59f8913faafc5acd2115

  • SHA512

    abda348451b260deb1412c860c998e5c4bb7c98e30dee3532540770d2ca37cff9c73e895b60ef2695675700faca5d9471e844b58389f9d2f84bdf5e3cee01d52

  • SSDEEP

    98304:nXmiqpvgjTcOKxbPEIYG/8HHkulu4yzZpY51JRi:nXmiHsOKgE0n9iEJRi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 42 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 3a0bccbda344f5670678aebd73c56f9f_JaffaCakes118
    .rar
  • Aston.1.9.5.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    28d94e5199b88ad374b3cb2118e31a66


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • A-Master.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Ainet.dll
    .dll windows:4 windows x86 arch:x86

    7714763c636d6dcf2ea00a54cfc834b6


    Headers

    Imports

    Exports

    Sections

  • Aston Trans Refresh.txt
  • Aston.chm
    .chm
  • Aston.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Aston.rc
  • AstonEx.dll
    .dll windows:4 windows x86 arch:x86

    feb9c072304fc56de16b83eb12a025f1


    Headers

    Imports

    Exports

    Sections

  • Desktop.ini
  • FAQ.htm
    .html
  • License.txt
  • Pictures/3dmax.ico
  • Pictures/Afolder.ico
  • Pictures/AltDesk.bmp
  • Pictures/Aston.bmp
  • Pictures/COMPUTER1.ani
  • Pictures/Car.ico
  • Pictures/Closed Folder.ico
  • Pictures/FreeCell.ico
  • Pictures/GLOBE.ANI
  • Pictures/Hearts.ico
  • Pictures/Help.ico
  • Pictures/Install.bmp
  • Pictures/Media Player.ico
  • Pictures/Media Player1.ico
  • Pictures/MineSweeper.ico
  • Pictures/More.bmp
  • Pictures/Open Folder.ico
  • Pictures/Ppanel.bmp
  • Pictures/SF.ico
  • Pictures/Solitare.ico
  • Pictures/Sound.ico
  • Pictures/Uninst.bmp
  • Pictures/Winzip.ico
  • Pictures/Wordpad.ico
  • Pictures/altdesk.ico
  • Pictures/astonshell.ico
  • Pictures/cnet.ico
  • Pictures/deviantart.ico
  • Pictures/excel.ico
  • Pictures/fg.ico
  • Pictures/firefox.ico
  • Pictures/google.ico
  • Pictures/icq.ico
  • Pictures/illustrator.ico
  • Pictures/ledit.ico
  • Pictures/mail.ico
  • Pictures/nero.ico
  • Pictures/office.ani
  • Pictures/outlook.ico
  • Pictures/paint.ico
  • Pictures/photoshop.ico
  • Pictures/private.ico
  • Pictures/sd1.ico
  • Pictures/sd2.ico
  • Pictures/tc.ico
  • Pictures/thebat.ani
  • Pictures/tucows.ico
  • Pictures/wab.ico
  • Pictures/winamp.ico
  • Pictures/windvd.ico
  • Pictures/winrar.ico
  • Pictures/word.ico
  • Plugins.rc
  • Plugins/AClock.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/AltDesk.plg
    .dll windows:4 windows x86 arch:x86

    120c405da406cb0b8b62eaef8aa7840b


    Headers

    Imports

    Exports

    Sections

  • Plugins/AstAmp.plg
    .dll windows:4 windows x86 arch:x86

    ca5091c0b24e19deb7bf9f67ed5f466e


    Headers

    Imports

    Exports

    Sections

  • Plugins/AutoRun.plg
    .dll windows:4 windows x86 arch:x86

    362c1cd92b004c6d2efbbb87d8c9e93a


    Headers

    Imports

    Exports

    Sections

  • Plugins/Cpu95nt.tbp
    .dll windows:4 windows x86 arch:x86

    a528b69b38c33a00aa066dd1383d8133


    Headers

    Imports

    Exports

    Sections

  • Plugins/DisksEx.plg
    .dll windows:4 windows x86 arch:x86

    f9f3d070c994095e6a7852fc2c4695c6


    Headers

    Imports

    Exports

    Sections

  • Plugins/MenuEx.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/NOTEBOOK.DAT
  • Plugins/NetTraf.plg
    .dll windows:4 windows x86 arch:x86

    46ab53f1aad77878df541e057e43debb


    Headers

    Imports

    Exports

    Sections

  • Plugins/NoteBk.tbp
    .dll windows:4 windows x86 arch:x86

    9783ff4a3a7bb51551bd84e98431bd01


    Headers

    Imports

    Exports

    Sections

  • Plugins/Noteboo1.dat
  • Plugins/Panel.plg
    .dll windows:4 windows x86 arch:x86

    7241deb11e4d22d203dd8eff327c3da2


    Headers

    Imports

    Exports

    Sections

  • Plugins/QLaunch.plg
    .dll windows:4 windows x86 arch:x86

    f7c4ff11fa62054bf6e2f60da8a5264a


    Headers

    Imports

    Exports

    Sections

  • Plugins/RecycleBinEx.plg
    .dll windows:4 windows x86 arch:x86

    a73a7ddd3ebba49273a2c9930e92106c


    Headers

    Imports

    Exports

    Sections

  • Plugins/Search.plg
    .dll windows:4 windows x86 arch:x86

    c88847e31f506a54c8dbd47f7f945f5b


    Headers

    Imports

    Exports

    Sections

  • Plugins/SkinClckEx.plg
    .dll windows:4 windows x86 arch:x86

    617f72517feddd32312fb5c7b7bdbd52


    Headers

    Imports

    Exports

    Sections

  • Plugins/Sticker.plg
    .dll windows:4 windows x86 arch:x86

    6d5c3012cab6958a9833bff311a8b1a6


    Headers

    Imports

    Exports

    Sections

  • Plugins/VertPanel.plg
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/VistaBTN.plg
    .dll windows:4 windows x86 arch:x86

    3ab50884d156352bbba422343fc13e04


    Headers

    Imports

    Exports

    Sections

  • Plugins/Zoom.tbp
    .dll windows:4 windows x86 arch:x86

    a79d8d20f36219eedb9ab554be099d26


    Headers

    Imports

    Exports

    Sections

  • Plugins/aes.dll
    .dll windows:4 windows x86 arch:x86

    6c8408bb5d7d5a5b75b9314f94e68763


    Headers

    Imports

    Exports

    Sections

  • Plugins/aes_license.txt
  • Plugins/cpuusage.vxd
  • Plugins/rss.plg
    .dll windows:4 windows x86 arch:x86

    a0c6ed2fb5066427b7d4f763799e7226


    Headers

    Imports

    Exports

    Sections

  • PrintMon.exe
    .exe windows:4 windows x86 arch:x86

    98c6b35d3302369aed53f5c1a30f7bcc


    Headers

    Imports

    Sections

  • Readme.txt
  • SHDoctor.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ShellSwp.exe
    .exe windows:4 windows x86 arch:x86

    e7827a269f7f1e31f508c15ec8c2113f


    Headers

    Imports

    Sections

  • Shswdos.exe
  • Skinning Tutorial.chm
    .chm
  • Starter.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Themes/Aston Desktop.atz
    .zip .ps1 polyglot
  • AltDesk/Skin/Handy-metallic.ini
  • AltDesk/Skin/buttons.bmp
  • AltDesk/Skin/main.bmp
  • BarSkin.bmp
  • Config1024x768.tfa
  • Config1152x864.tfa
  • Config1280x1024.tfa
  • Config1600x1200.tfa
  • Config800x600.tfa
  • Fonts/Aston-f1.ttf
  • Icons/A-Astonshell.ANKz
    .zip
  • a-astonshell.ank
  • astonshell.bmp
  • Icons/A-Help.ANKz
    .zip
  • a-help.ank
  • help.bmp
  • Icons/A-Master.ANKz
    .zip
  • a-master.ank
  • master.bmp
  • Icons/A-SSwapper.ANKz
    .zip
  • a-sswapper.ank
  • sswapper.bmp
  • Icons/A-Thwizard.ANKz
    .zip
  • a-twizard.ank
  • twizard.bmp
  • Icons/Control Panel.ANKz
    .zip
  • control panel.ank
  • control panel.bmp
  • Icons/Find.ANKz
    .zip
  • Icons/Logoff.ANKz
    .zip
  • Icons/My computer.ANKz
    .zip
  • Icons/Mycomp.ANKz
    .zip
  • Icons/Panel1024.bmp
  • Icons/Panel1152.bmp
  • Icons/Panel1280.bmp
  • Icons/Panel1600.bmp
  • Icons/Panel800.bmp
  • Icons/Run.ANKz
    .zip
  • Icons/Screen Settings.ANKz
    .zip
  • Icons/Shut Down.ANKz
    .zip
  • Icons/recycle.ankz
    .zip
  • LeftTopSkin.bmp
  • Plugins/AL.png
    .png
  • Plugins/AR.png
    .png
  • Plugins/Clock-hands.bmp
  • Plugins/Clock.bmp
  • Plugins/calendar.png
    .png
  • Plugins/clockex.3pic
    .zip
  • Plugins/disks.png
    .png
  • Plugins/find1.ankz
    .zip
  • Plugins/left-flank.png
    .png
  • Plugins/mm-footer.bmp
  • Plugins/mm-item.bmp
  • Plugins/mm-select.bmp
  • Plugins/mm-separator.bmp
  • Plugins/mm-title.bmp
  • Plugins/q-launch-ico.bmp
  • Plugins/q-launch.3pic
    .zip
  • Plugins/right-flank.png
    .png
  • Plugins/search.3pic
    .zip
  • Plugins/topp-footer1.png
    .png
  • Plugins/topp-footer2.png
    .png
  • Plugins/topp-footer3.png
    .png
  • Plugins/topp-header.png
    .png
  • Plugins/topp-item1.png
    .png
  • Plugins/topp-item2.png
    .png
  • Plugins/topp-item3.png
    .png
  • Plugins/topp-separator.png
    .png
  • Plugins/topp-subitem1.png
    .png
  • Plugins/topp-subitem2.png
    .png
  • Plugins/topp-subitem3.png
    .png
  • Plugins/trash.png
    .png
  • RightTopSkin.bmp
  • Start1.ANKz
    .zip
  • TaskActi.3PIC
    .zip
  • TaskInac.3pic
    .zip
  • TaskMin.3pic
    .zip
  • ToolLeft.bmp
  • ToolRight.bmp
  • TrayIcon1.bmp
  • TrayIcon2.bmp
  • TraySkin.bmp
  • Wallpaper1280x1024.jpg
    .jpg
  • theme.jpg
    .jpg
  • Themes/Aston XP.atz
    .zip
  • Themes/Cios.atz
    .zip
  • Themes/Makrom.atz
    .zip
  • Thwizard.dll
    .dll windows:4 windows x86 arch:x86

    2abe8826b95991103fbe6dd6a3e95a00


    Headers

    Imports

    Exports

    Sections

  • Thwizard.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Tips.rc
  • Whatsnew.htm
  • XP/indicdll.dll
    .dll windows:5 windows x86 arch:x86

    e849a4fb4c69e579ec1b546f9edc4a93


    Headers

    Imports

    Sections

  • XP/internat.exe
    .exe windows:5 windows x86 arch:x86

    6ec4b9854181010bb09f30f0c6b36520


    Headers

    Imports

    Sections

  • aHook.dll
    .dll windows:4 windows x86 arch:x86

    fd74a2843629e181becf5524f6b8a58f


    Headers

    Imports

    Exports

    Sections

  • drawpng.dll
    .dll windows:4 windows x86 arch:x86

    0e15f35169a7236de6c546c4dd8b5599


    Headers

    Imports

    Exports

    Sections

  • hook.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • lsapi.dll
    .dll windows:4 windows x86 arch:x86

    af6cad12466d61abb028e776eddc8acd


    Headers

    Imports

    Exports

    Sections

  • mmkbd.dll
    .dll windows:4 windows x86 arch:x86

    f9903b1c103680ccebfe99335e528652


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • 使用说明.url
    .url