Overview

overview

7

Static

static

3

2.0/WDUpdate.exe

windows7-x64

1

2.0/WDUpdate.exe

windows10-2004-x64

1

2.0/WindowsDoctor.chm

windows7-x64

1

2.0/WindowsDoctor.chm

windows10-2004-x64

1

2.0/WindowsDoctor.exe

windows7-x64

7

2.0/WindowsDoctor.exe

windows10-2004-x64

7

2.0/WindowsDoctor.url

windows7-x64

6

2.0/WindowsDoctor.url

windows10-2004-x64

3

2.0/keygen.exe

windows7-x64

1

2.0/keygen.exe

windows10-2004-x64

1

2.0/新云软件.url

windows7-x64

1

2.0/新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4cdb5a8132f2b48142a1fa1b31a0c878_JaffaCakes118

  • Size

    4.7MB

  • MD5

    4cdb5a8132f2b48142a1fa1b31a0c878

  • SHA1

    c525707e494ceb926bb38029477195c28d98dc23

  • SHA256

    03b8793e465ccd2d993ded6995c00ac201b20e2a8d140a9a02f1e1c2037f2f80

  • SHA512

    e641ea10acdd4f858ec67b0568b2c4ba999b565e483a57e4e1924ae643b0422ec8a4db680cdba9fdd4d373a96da7a75bb9b6e7ff921adb54a080a12579ff65f8

  • SSDEEP

    98304:p8GtS9oJb4Fyeplj7pLFph5zpxk97OtM4CPlj4ZvQt7tF:pziFymw9y2ljyvc5F

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cdb5a8132f2b48142a1fa1b31a0c878_JaffaCakes118
    .rar
  • 2.0/App.ini
  • 2.0/BHO-no.ini
  • 2.0/BHO.ini
  • 2.0/Config.ini
  • 2.0/IMG/1.bmp
  • 2.0/IMG/2.bmp
  • 2.0/IMG/3.bmp
  • 2.0/IMG/4.bmp
  • 2.0/IMG/Update1.bmp
  • 2.0/IMG/backg.bmp
  • 2.0/IMG/bho.bmp
  • 2.0/IMG/process.bmp
  • 2.0/IMG/service1.bmp
  • 2.0/IMG/service2.bmp
  • 2.0/IMG/startup.bmp
  • 2.0/Process-no.ini
  • 2.0/Service-no.ini
  • 2.0/WDUpdate.exe
    .exe windows:4 windows x86 arch:x86

    43972e07c836599556214885fe621393


    Headers

    Imports

    Sections

  • 2.0/WinUpdate.ini
  • 2.0/WindowsDoctor.chm
    .chm
  • 2.0/WindowsDoctor.exe
    .exe windows:4 windows x86 arch:x86

    178949c2e725bafcb420800e1e0bc517


    Headers

    Imports

    Sections

  • 2.0/WindowsDoctor.url
  • 2.0/keygen.exe
    .exe windows:4 windows x86 arch:x86

    f251e63905aa3e04357a3755ce380175


    Headers

    Imports

    Sections

  • 2.0/mondevs.txt
  • 2.0/pcidevs.txt
  • 2.0/startItems-no.ini
  • 2.0/startItems.ini
  • 2.0/usbdevs.txt
  • 2.0/新云软件.url
    .url