General

  • Target

    4019be98ae0ebcf388d64f776b865d94_JaffaCakes118

  • Size

    80KB

  • MD5

    4019be98ae0ebcf388d64f776b865d94

  • SHA1

    f1e2a74ad1dc8b5eca767c8294e5d8ed59baf36c

  • SHA256

    fa685239b88f3380e06a9b9674d5cb2240240b98ffedc10985ebdddaf5f35b6d

  • SHA512

    4c02b391889d96ef86e0e7bbc73e5c0e0f45d52ea62eb208e28033240b03d79d88edd73ad0ead97371fdbbf1fddfeea12310c0a07a7c353e6f28f47e6754b17e

  • SSDEEP

    1536:QNkFE0FvLDE5S6Wm/4CZBGFme+3ZwDHFT5rYhIesK1eNa3GlNDdsnEbDO1Pzh:YkLDA5S6Wm/4CLGke+3+DHp5UhajawOT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4019be98ae0ebcf388d64f776b865d94_JaffaCakes118
    .rar
  • AGENT.vbp
  • AGENT.vbw
  • APIDeclarations.bas
    .vbs
  • COMPCONTROL.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMPCONTROLS.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Class1.cls
    .vbs
  • CompControls.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e055c2db4914af23295b3aa90346e374


    Headers

    Imports

    Exports

    Sections

  • Form1.frm
    .vbs
  • Form1.frx
  • Form2.frm
  • Form2.frx
  • Formx.frm
    .vbs
  • Formx.frx
  • Menus.frm
    .vbs
  • Project1.vbw
  • Registry.cls
    .js
  • Spy_Form.frm
    .vbs
  • Spy_Form.frx
  • close.frm
    .vbs
  • close.frx
  • fresolution.frm
    .vbs
  • fresolution.frx
  • 下载说明.htm
    .html .js polyglot
  • 新云软件.url
    .url