General

  • Target

    5f5093ae5dfec340fe22339497df8591_JaffaCakes118

  • Size

    4.6MB

  • MD5

    5f5093ae5dfec340fe22339497df8591

  • SHA1

    6de9723d9f704a226d101c15daed6ecd61551154

  • SHA256

    c039f7fb292df6eb9835fdb317f7cc8931b183d7cf1eacc3ca6bf84f0e2083fa

  • SHA512

    9ccc9a3933a6462777178498f1770a2e3f068db5a9299064b111e03f5993b061e3473acb72058e1aa21cf87d8b2076f1d92262872d8bfde91bf2a55a4aa1b2bb

  • SSDEEP

    98304:rTWHIIUyz98DqCCyJz6OimesMtNMkojTXTNIz:+RUwmCyJzBgOlw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 5f5093ae5dfec340fe22339497df8591_JaffaCakes118
    .rar
  • 超级画板2.1单文件优化版/ReadMe.txt
  • 超级画板2.1单文件优化版/帮助文档.chm
    .chm
  • 超级画板2.1单文件优化版/超级画板2.1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $TEMP/BCGCBPRO673.dll
    .dll windows:4 windows x86 arch:x86

    f027a367bfe9964b55a371e62adf6ad1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ChemEquation2.dll
    .dll windows:4 windows x86 arch:x86

    5bcd7168b613ccb08f33d0860373f052


    Headers

    Imports

    Exports

    Sections

  • $TEMP/DrawObjLib.dll
    .dll windows:4 windows x86 arch:x86

    fe74560934d150688b3a525b267395ea


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Expression.dll
    .dll windows:4 windows x86 arch:x86

    0085a7537fbfeb1c0db37de3e8ade988


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Flash.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cd3d89be41dd651b02dd66afd312a7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Gif.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e2d0cd6c805953ded6d6759b52e2eb7


    Headers

    Imports

    Exports

    Sections

  • $TEMP/MacroIterate/Zjzssp/InstantNoodles.lib
  • $TEMP/MacroIterate/Zjzssp/MacroIterate.mi
  • $TEMP/MathAlgebra.dll
    .dll windows:4 windows x86 arch:x86

    c20a5517dadd76b8dc5ac6efc23d0a7e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/MathZjz.exe
    .exe windows:4 windows x86 arch:x86

    eec2b1513153d4beb2bf96829c19272c


    Headers

    Imports

    Sections

  • $TEMP/Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ecde12b9c6e6d6da9a61428201607b82


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Mfc42loc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/Msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ReasoningLib.dll
    .dll windows:4 windows x86 arch:x86

    50f3e16f422dbc9d531c0165148b49c7


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SearchServer.exe
    .exe windows:4 windows x86 arch:x86

    02beeae512a6f415e33b1f96347ee1c5


    Headers

    Imports

    Sections

  • $TEMP/UserImages.bmp
  • $TEMP/ZjzSoftIp.ini
  • $TEMP/mathZjz.dll
  • $TEMP/readme.txt
  • $TEMP/sspHtml1024.dll
    .html