Overview

overview

4

Static

static

3

cvery.comd...mo.doc

windows7-x64

4

cvery.comd...mo.doc

windows10-2004-x64

1

cvery.comd...t1.exe

windows7-x64

1

cvery.comd...t1.exe

windows10-2004-x64

1

cvery.comd...it1.js

windows7-x64

3

cvery.comd...it1.js

windows10-2004-x64

3

cvery.comd...it1.js

windows7-x64

3

cvery.comd...it1.js

windows10-2004-x64

3

cvery.comd...BCB.js

windows7-x64

3

cvery.comd...BCB.js

windows10-2004-x64

3

cvery.comd...CB6.js

windows7-x64

3

cvery.comd...CB6.js

windows10-2004-x64

3

cvery.comd...e.html

windows7-x64

1

cvery.comd...e.html

windows10-2004-x64

1

cvery.comd...lp.chm

windows7-x64

1

cvery.comd...lp.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    42545bbd424298b4e3c581faa5804303_JaffaCakes118

  • Size

    5.3MB

  • MD5

    42545bbd424298b4e3c581faa5804303

  • SHA1

    80b03fbb4affe5215e933f6077b076f74bd59718

  • SHA256

    e7cdbd354ab6aa64881ebbe43a3b68ceef8f802fe6fd38b2686844ef53ec0195

  • SHA512

    b75b519dbd894ed0ea9069d7e848686026dc9179b652fda21ea8cd678a2cd0c37c20f0174b7e172fecc7cf983f697ac5222cc1fbc60d3a280a5e9a4d16ad44be

  • SSDEEP

    98304:6XueoayRw66kjGuP90HXmizvbiH5/9I9fXvgXbr44gP8d3rosGsZje:6Xueoxjn10Hxzvb0N9I9TPoro/X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42545bbd424298b4e3c581faa5804303_JaffaCakes118
    .rar
  • cvery.comd34765972/d5/Compilers.inc
  • cvery.comd34765972/d5/ImgUtil.dcu
  • cvery.comd34765972/d5/SkinRead.dcu
  • cvery.comd34765972/d5/WinConvert.dcu
  • cvery.comd34765972/d5/WinSkinCollection.dcu
  • cvery.comd34765972/d5/WinSkinD5.dcu
  • cvery.comd34765972/d5/WinSkinD5.dpk
  • cvery.comd34765972/d5/WinSkinData.dcu
  • cvery.comd34765972/d5/WinSkinDlg.dcu
  • cvery.comd34765972/d5/WinSkinForm.dcu
  • cvery.comd34765972/d5/WinSkinIni.dcu
  • cvery.comd34765972/d5/WinSkinReg.dcr
  • cvery.comd34765972/d5/WinSkinReg.dcu
  • cvery.comd34765972/d5/WinSkinReg.pas
  • cvery.comd34765972/d5/WinSkinStore.dcu
  • cvery.comd34765972/d5/WinSubClass.dcu
  • cvery.comd34765972/d5/Winskinmenu.dcu
  • cvery.comd34765972/d5/vclskin.res
  • cvery.comd34765972/d6/Compilers.inc
  • cvery.comd34765972/d6/ImgUtil.dcu
  • cvery.comd34765972/d6/SkinRead.dcu
  • cvery.comd34765972/d6/VclskinD6.dcu
  • cvery.comd34765972/d6/WinConvert.dcu
  • cvery.comd34765972/d6/WinSkinD6.dcu
  • cvery.comd34765972/d6/WinSkinD6.dpk
  • cvery.comd34765972/d6/WinSkinD6.dsk
  • cvery.comd34765972/d6/WinSkinData.dcu
  • cvery.comd34765972/d6/WinSkinDlg.dcu
  • cvery.comd34765972/d6/WinSkinForm.dcu
  • cvery.comd34765972/d6/WinSkinIni.dcu
  • cvery.comd34765972/d6/WinSkinReg.dcr
  • cvery.comd34765972/d6/WinSkinReg.dcu
  • cvery.comd34765972/d6/WinSkinReg.pas
  • cvery.comd34765972/d6/WinSkinStore.dcu
  • cvery.comd34765972/d6/WinSubClass.dcu
  • cvery.comd34765972/d6/Winskinmenu.dcu
  • cvery.comd34765972/d6/vclskin.res
  • cvery.comd34765972/d7/Compilers.inc
  • cvery.comd34765972/d7/ImgUtil.dcu
  • cvery.comd34765972/d7/SkinRead.dcu
  • cvery.comd34765972/d7/WinConvert.dcu
  • cvery.comd34765972/d7/WinSkinCollection.dcu
  • cvery.comd34765972/d7/WinSkinD7.dcu
  • cvery.comd34765972/d7/WinSkinD7.dpk
  • cvery.comd34765972/d7/WinSkinD7.drc
  • cvery.comd34765972/d7/WinSkinD7.dsk
  • cvery.comd34765972/d7/WinSkinD7.res
  • cvery.comd34765972/d7/WinSkinD7.stat
  • cvery.comd34765972/d7/WinSkinData.dcu
  • cvery.comd34765972/d7/WinSkinDlg.dcu
  • cvery.comd34765972/d7/WinSkinForm.dcu
  • cvery.comd34765972/d7/WinSkinIni.dcu
  • cvery.comd34765972/d7/WinSkinReg.dcr
  • cvery.comd34765972/d7/WinSkinReg.dcu
  • cvery.comd34765972/d7/WinSkinReg.pas
  • cvery.comd34765972/d7/WinSkinStore.dcu
  • cvery.comd34765972/d7/WinSubClass.dcu
  • cvery.comd34765972/d7/Winskinmenu.dcu
  • cvery.comd34765972/d7/vclskin.res
  • cvery.comd34765972/demos/Caption Button/Project1.cfg
  • cvery.comd34765972/demos/Caption Button/Project1.dof
  • cvery.comd34765972/demos/Caption Button/Project1.dpr
  • cvery.comd34765972/demos/Caption Button/Project1.res
  • cvery.comd34765972/demos/Caption Button/Unit1.dcu
  • cvery.comd34765972/demos/Caption Button/Unit1.dfm
  • cvery.comd34765972/demos/Caption Button/Unit1.pas
  • cvery.comd34765972/demos/Caption Button/macos.skn
  • cvery.comd34765972/demos/Docking/dockex.cfg
  • cvery.comd34765972/demos/Docking/dockex.dof
  • cvery.comd34765972/demos/Docking/dockex.dpr
  • cvery.comd34765972/demos/Docking/dockex.drc
  • cvery.comd34765972/demos/Docking/dockex.res
  • cvery.comd34765972/demos/Docking/uConjoinHost.ddp
  • cvery.comd34765972/demos/Docking/uConjoinHost.dfm
  • cvery.comd34765972/demos/Docking/uConjoinHost.pas
  • cvery.comd34765972/demos/Docking/uDockForm.ddp
  • cvery.comd34765972/demos/Docking/uDockForm.dfm
  • cvery.comd34765972/demos/Docking/uDockForm.pas
  • cvery.comd34765972/demos/Docking/uMain.ddp
  • cvery.comd34765972/demos/Docking/uMain.dfm
  • cvery.comd34765972/demos/Docking/uMain.pas
  • cvery.comd34765972/demos/Docking/uTabHost.ddp
  • cvery.comd34765972/demos/Docking/uTabHost.dfm
  • cvery.comd34765972/demos/Docking/uTabHost.pas
  • cvery.comd34765972/demos/NestedForm/Project1.cfg
  • cvery.comd34765972/demos/NestedForm/Project1.dof
  • cvery.comd34765972/demos/NestedForm/Project1.dpr
  • cvery.comd34765972/demos/NestedForm/Project1.drc
  • cvery.comd34765972/demos/NestedForm/Project1.res
  • cvery.comd34765972/demos/NestedForm/Unit1.dcu
  • cvery.comd34765972/demos/NestedForm/Unit1.ddp
  • cvery.comd34765972/demos/NestedForm/Unit1.dfm
  • cvery.comd34765972/demos/NestedForm/Unit1.pas
  • cvery.comd34765972/demos/NestedForm/Unit2.dcu
  • cvery.comd34765972/demos/NestedForm/Unit2.ddp
  • cvery.comd34765972/demos/NestedForm/Unit2.dfm
  • cvery.comd34765972/demos/NestedForm/Unit2.pas
  • cvery.comd34765972/demos/NestedForm/Unit3.dcu
  • cvery.comd34765972/demos/NestedForm/Unit3.dfm
  • cvery.comd34765972/demos/NestedForm/Unit3.pas
  • cvery.comd34765972/demos/QuantumGrid4Demo/SkinEQGrid.dcu
  • cvery.comd34765972/demos/QuantumGrid4Demo/SkinEQGrid.pas
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.cfg
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.doc
    .doc .vbs windows office2003 polyglot
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.dof
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.dpr
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.dsk
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemo.res
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoAbout.dcu
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoAbout.dfm
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoAbout.pas
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoMain.dcu
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoMain.ddp
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoMain.dfm
  • cvery.comd34765972/demos/QuantumGrid4Demo/UnboundSimpleDemoMain.pas
  • cvery.comd34765972/demos/QuantumGrid4Demo/nineplanets.txt
  • cvery.comd34765972/demos/demo/Config.ini
  • cvery.comd34765972/demos/demo/Project1.cfg
  • cvery.comd34765972/demos/demo/Project1.dof
  • cvery.comd34765972/demos/demo/Project1.dpr
  • cvery.comd34765972/demos/demo/Project1.drc
  • cvery.comd34765972/demos/demo/Project1.dsk
  • cvery.comd34765972/demos/demo/Project1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comd34765972/demos/demo/Project1.mes
  • cvery.comd34765972/demos/demo/Project1.res
  • cvery.comd34765972/demos/demo/Unit1.dcu
  • cvery.comd34765972/demos/demo/Unit1.ddp
  • cvery.comd34765972/demos/demo/Unit1.dfm
  • cvery.comd34765972/demos/demo/Unit1.pas
    .js
  • cvery.comd34765972/demos/demo/Unit2.dcu
  • cvery.comd34765972/demos/demo/Unit2.dfm
  • cvery.comd34765972/demos/demo/Unit2.pas
  • cvery.comd34765972/demos/mdi2/CHILDWIN.PAS
  • cvery.comd34765972/demos/mdi2/CHILDWIN.dcu
  • cvery.comd34765972/demos/mdi2/CHILDWIN.ddp
  • cvery.comd34765972/demos/mdi2/CHILDWIN.dfm
  • cvery.comd34765972/demos/mdi2/MAIN.PAS
  • cvery.comd34765972/demos/mdi2/MAIN.dcu
  • cvery.comd34765972/demos/mdi2/MAIN.ddp
  • cvery.comd34765972/demos/mdi2/MAIN.dfm
  • cvery.comd34765972/demos/mdi2/MDIAPP.DPR
  • cvery.comd34765972/demos/mdi2/MDIAPP.ICO
  • cvery.comd34765972/demos/mdi2/MDIAPP.RES
  • cvery.comd34765972/demos/mdi2/MDIAPP.dsk
  • cvery.comd34765972/demos/mdi2/about.dcu
  • cvery.comd34765972/demos/mdi2/about.dfm
  • cvery.comd34765972/demos/mdi2/about.pas
  • cvery.comd34765972/demos/multi skin/Config.ini
  • cvery.comd34765972/demos/multi skin/Project1.cfg
  • cvery.comd34765972/demos/multi skin/Project1.dof
  • cvery.comd34765972/demos/multi skin/Project1.dpr
  • cvery.comd34765972/demos/multi skin/Project1.drc
  • cvery.comd34765972/demos/multi skin/Project1.dsk
  • cvery.comd34765972/demos/multi skin/Project1.mes
  • cvery.comd34765972/demos/multi skin/Project1.res
  • cvery.comd34765972/demos/multi skin/Unit1.dcu
  • cvery.comd34765972/demos/multi skin/Unit1.ddp
  • cvery.comd34765972/demos/multi skin/Unit1.dfm
  • cvery.comd34765972/demos/multi skin/Unit1.pas
    .js
  • cvery.comd34765972/demos/multi skin/Unit2.dcu
  • cvery.comd34765972/demos/multi skin/Unit2.dfm
  • cvery.comd34765972/demos/multi skin/Unit2.pas
  • cvery.comd34765972/demos/toolbar2k/Demo.cfg
  • cvery.comd34765972/demos/toolbar2k/Demo.dof
  • cvery.comd34765972/demos/toolbar2k/Demo.dpr
  • cvery.comd34765972/demos/toolbar2k/Demo.dsk
  • cvery.comd34765972/demos/toolbar2k/Demo.res
  • cvery.comd34765972/demos/toolbar2k/Demo1.dcu
  • cvery.comd34765972/demos/toolbar2k/Demo1.ddp
  • cvery.comd34765972/demos/toolbar2k/Demo1.dfm
  • cvery.comd34765972/demos/toolbar2k/Demo1.pas
  • cvery.comd34765972/demos/toolbar2k/DemoBCB.bpr
  • cvery.comd34765972/demos/toolbar2k/DemoBCB.cpp
    .js
  • cvery.comd34765972/demos/toolbar2k/DemoBCB.res
  • cvery.comd34765972/demos/toolbar2k/DemoBCB6.bpr
    .xml
  • cvery.comd34765972/demos/toolbar2k/DemoBCB6.cpp
    .js
  • cvery.comd34765972/demos/toolbar2k/DemoBCB6.res
  • cvery.comd34765972/help/ReadMe.html
  • cvery.comd34765972/help/help.chm
    .chm
  • cvery.comd34765972/skins/Get More Skins.txt
  • cvery.comd34765972/skins/Project2.res
  • cvery.comd34765972/skins/iTunes.skn
  • cvery.comd34765972/skins/macos.skn
  • cvery.comd34765972/skins/macosNew.skn
  • cvery.comd34765972/skins/mxp05.skn
  • cvery.comd34765972/skins/mxp1.skn
  • cvery.comd34765972/skins/mxp2.skn
  • cvery.comd34765972/skins/mxp3.skn
  • cvery.comd34765972/skins/mxp4.skn
  • cvery.comd34765972/skins/mxskin03.skn
  • cvery.comd34765972/skins/mxskin1.skn
  • cvery.comd34765972/skins/mxskin10.skn
  • cvery.comd34765972/skins/mxskin11.skn
  • cvery.comd34765972/skins/mxskin12.skn
  • cvery.comd34765972/skins/mxskin13.skn
  • cvery.comd34765972/skins/mxskin14.skn
  • cvery.comd34765972/skins/mxskin15.skn
  • cvery.comd34765972/skins/mxskin17.skn
  • cvery.comd34765972/skins/mxskin18.skn
  • cvery.comd34765972/skins/mxskin19.skn
  • cvery.comd34765972/skins/mxskin2.skn
  • cvery.comd34765972/skins/mxskin20.skn
  • cvery.comd34765972/skins/mxskin21.skn
  • cvery.comd34765972/skins/mxskin22.skn
  • cvery.comd34765972/skins/mxskin23.skn
  • cvery.comd34765972/skins/mxskin24.skn
  • cvery.comd34765972/skins/mxskin25.skn
  • cvery.comd34765972/skins/mxskin26.skn
  • cvery.comd34765972/skins/mxskin27.skn
  • cvery.comd34765972/skins/mxskin28.skn
  • cvery.comd34765972/skins/mxskin29.skn
  • cvery.comd34765972/skins/mxskin30.skn
  • cvery.comd34765972/skins/mxskin31.skn
  • cvery.comd34765972/skins/mxskin32.skn
  • cvery.comd34765972/skins/mxskin33.skn
  • cvery.comd34765972/skins/mxskin34.skn
  • cvery.comd34765972/skins/mxskin35.skn
  • cvery.comd34765972/skins/mxskin36.skn
  • cvery.comd34765972/skins/mxskin37.skn
  • cvery.comd34765972/skins/mxskin38.skn
  • cvery.comd34765972/skins/mxskin39.skn
  • cvery.comd34765972/skins/mxskin40.skn
  • cvery.comd34765972/skins/mxskin41.skn
  • cvery.comd34765972/skins/mxskin42.skn
  • cvery.comd34765972/skins/mxskin43.skn
  • cvery.comd34765972/skins/mxskin44.skn
  • cvery.comd34765972/skins/mxskin45.skn
  • cvery.comd34765972/skins/mxskin46.skn
  • cvery.comd34765972/skins/mxskin47.skn
  • cvery.comd34765972/skins/mxskin48.skn
  • cvery.comd34765972/skins/mxskin49.skn
  • cvery.comd34765972/skins/mxskin8.skn
  • cvery.comd34765972/skins/mxskin9.skn
  • cvery.comd34765972/skins/skin0000.skn
  • cvery.comd34765972/skins/skin0003.skn
  • cvery.comd34765972/skins/skin0004.skn
  • cvery.comd34765972/skins/skin0006.skn
  • cvery.comd34765972/skins/skin0010.skn
  • cvery.comd34765972/skins/skin0011.skn
  • cvery.comd34765972/skins/skin0012.skn
  • cvery.comd34765972/skins/skin0015.skn
  • cvery.comd34765972/skins/skin0016.skn
  • cvery.comd34765972/skins/skin0018.skn
  • cvery.comd34765972/skins/skin0020.skn
  • cvery.comd34765972/skins/skin0021.skn
  • cvery.comd34765972/skins/skin0025.skn
  • cvery.comd34765972/skins/skin0028.skn
  • cvery.comd34765972/skins/skin0031.skn
  • cvery.comd34765972/skins/skin0037.skn
  • cvery.comd34765972/skins/skin0038.skn
  • cvery.comd34765972/skins/skin0040.skn
  • cvery.comd34765972/skins/skin0041.skn
  • cvery.comd34765972/skins/skin0046.skn
  • cvery.comd34765972/skins/skin0050.skn
  • cvery.comd34765972/skins/skin0062.skn
  • cvery.comd34765972/skins/skin0063.skn
  • cvery.comd34765972/skins/skin0076.skn
  • cvery.comd34765972/skins/skin0081.skn
  • cvery.comd34765972/skins/skin0083.skn
  • cvery.comd34765972/skins/skin0086.skn
  • cvery.comd34765972/skins/skin0094.skn
  • cvery.comd34765972/skins/skin0095.skn
  • cvery.comd34765972/skins/skin0098.skn
  • cvery.comd34765972/skins/skin0099.skn
  • cvery.comd34765972/skins/skin0101.skn
  • cvery.comd34765972/skins/skin0103.skn
  • cvery.comd34765972/skins/skin0113.skn
  • cvery.comd34765972/skins/skin0117.skn
  • cvery.comd34765972/skins/skin0120.skn
  • cvery.comd34765972/skins/skin0123.skn
  • cvery.comd34765972/skins/skin0125.skn
  • cvery.comd34765972/skins/skin0127.skn
  • cvery.comd34765972/skins/skin0151.skn
  • cvery.comd34765972/skins/skin0153.skn
  • cvery.comd34765972/skins/skin0165.skn
  • cvery.comd34765972/skins/skin0171.skn
  • cvery.comd34765972/skins/skin0188.skn
  • cvery.comd34765972/skins/skin0196.skn
  • cvery.comd34765972/skins/skin0204.skn
  • cvery.comd34765972/skins/skin0217.skn
  • cvery.comd34765972/skins/skin0224.skn
  • cvery.comd34765972/skins/skin0225.skn
  • cvery.comd34765972/skins/skin0227.skn
  • cvery.comd34765972/skins/skin0230.skn
  • cvery.comd34765972/skins/skin0237.skn
  • cvery.comd34765972/skins/skin0243.skn
  • cvery.comd34765972/skins/skin0246.skn
  • cvery.comd34765972/skins/skin0256.skn
  • cvery.comd34765972/skins/skin0264.skn
  • cvery.comd34765972/skins/skin0273.skn
  • cvery.comd34765972/skins/skin0279.skn
  • cvery.comd34765972/skins/skin0281.skn
  • cvery.comd34765972/skins/skin0297.skn
  • cvery.comd34765972/skins/skin0316.skn
  • cvery.comd34765972/skins/skin0338.skn
  • cvery.comd34765972/skins/skin0357.skn
  • cvery.comd34765972/skins/skin0368.skn
  • cvery.comd34765972/skins/skin0377.skn
  • cvery.comd34765972/skins/skin0383.skn
  • cvery.comd34765972/下载说明.htm
    .html .js polyglot