General

  • Target

    628dfc1a67183ec55fe4c56401eceeb0_JaffaCakes118

  • Size

    3.6MB

  • MD5

    628dfc1a67183ec55fe4c56401eceeb0

  • SHA1

    18bb6fc2098464d6aecd58088a2e9939110c38c7

  • SHA256

    2523a3e0cb5cdb5044c7d31436f2063155c6d4f05c3903fbdfbeff18ffc5f274

  • SHA512

    317166b1026542c4e52bd38e4a200fbde53f582cc387a738ba5d619b78134c0c998585fb89c279f60e1c2c7080803a181e2bf4ea98aa53769104523cfbf16633

  • SSDEEP

    98304:Vv/jwViwlfCi1cbfjTet2qvcfyDJ+Q11wtxg0:VTobz1WjTeM1fk11wD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 628dfc1a67183ec55fe4c56401eceeb0_JaffaCakes118
    .rar
  • cvery.comvb9144523534524/server/123.txt
  • cvery.comvb9144523534524/server/FrmServer.frm
    .vbs
  • cvery.comvb9144523534524/server/GETDAY.mdb
  • cvery.comvb9144523534524/server/服务器.vbp
  • cvery.comvb9144523534524/server/服务器.vbw
  • cvery.comvb9144523534524/wjl/1.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/123.txt
  • cvery.comvb9144523534524/wjl/B-Studio.skn
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/DOLPHIN.ICO
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Form1.frm
    .vbs
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Form1.frx
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Form1.log
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Hearts.ico
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/MSSCCPRJ.SCC
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/PPBZ048.gif
    .gif
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Project1.vbp
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/Project1.vbw
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/UserControl1.ctl
    .vbs
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/UserControl1.ctx
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/XpProgressBar Info.txt
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/XpProgressBar.exp
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/XpProgressBar.lib
  • cvery.comvb9144523534524/wjl/ColXpProgressBar/XpProgressBar.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comvb9144523534524/wjl/ColXpProgressBar/XpProgressBar.vbw
  • cvery.comvb9144523534524/wjl/FRMGUA~1.log
  • cvery.comvb9144523534524/wjl/Flash.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cd3d89be41dd651b02dd66afd312a7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cvery.comvb9144523534524/wjl/Form1.frm
    .vbs
  • cvery.comvb9144523534524/wjl/Form1.frx
  • cvery.comvb9144523534524/wjl/Form1.log
  • cvery.comvb9144523534524/wjl/Form2.frm
    .vbs
  • cvery.comvb9144523534524/wjl/Form2.log
  • cvery.comvb9144523534524/wjl/FrmAddorReSet.frm
  • cvery.comvb9144523534524/wjl/FrmFind.frm
    .vbs
  • cvery.comvb9144523534524/wjl/FrmFind.frx
  • cvery.comvb9144523534524/wjl/FrmFind.log
  • cvery.comvb9144523534524/wjl/FrmFindEND.frm
    .vbs
  • cvery.comvb9144523534524/wjl/FrmFindEND.frx
  • cvery.comvb9144523534524/wjl/FrmFindEND.log
  • cvery.comvb9144523534524/wjl/FrmFlash.frm
  • cvery.comvb9144523534524/wjl/FrmMain.frm
    .vbs
  • cvery.comvb9144523534524/wjl/FrmMain.frx
  • cvery.comvb9144523534524/wjl/FrmMain.log
  • cvery.comvb9144523534524/wjl/FrmTem.frx
  • cvery.comvb9144523534524/wjl/FrmWish.frm
    .vbs
  • cvery.comvb9144523534524/wjl/FrmWish.frx
  • cvery.comvb9144523534524/wjl/FrmWish.log
  • cvery.comvb9144523534524/wjl/Frmshan.frm
  • cvery.comvb9144523534524/wjl/Frmshan.frx
  • cvery.comvb9144523534524/wjl/GETDAY.mdb
  • cvery.comvb9144523534524/wjl/MSSCCPRJ.SCC
  • cvery.comvb9144523534524/wjl/ModAddOrRemake.bas
  • cvery.comvb9144523534524/wjl/ModDay.bas
    .vbs
  • cvery.comvb9144523534524/wjl/ModOponDB.bas
    .vbs
  • cvery.comvb9144523534524/wjl/Module1.bas
  • cvery.comvb9144523534524/wjl/Thumbs.db
  • cvery.comvb9144523534524/wjl/TipOfDay.txt
  • cvery.comvb9144523534524/wjl/UserControl1.ctl
  • cvery.comvb9144523534524/wjl/actskin4.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comvb9144523534524/wjl/actskin4.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    15100362091594109428136cc0ce5508


    Headers

    Imports

    Exports

    Sections

  • cvery.comvb9144523534524/wjl/frmAbout.frm
    .vbs
  • cvery.comvb9144523534524/wjl/frmAbout.frx
  • cvery.comvb9144523534524/wjl/frmAbout.log
  • cvery.comvb9144523534524/wjl/frmAdd.frm
    .vbs
  • cvery.comvb9144523534524/wjl/frmAdd.frx
  • cvery.comvb9144523534524/wjl/frmAdd.log
  • cvery.comvb9144523534524/wjl/frmTem.frm
  • cvery.comvb9144523534524/wjl/frmTip.frm
    .vbs
  • cvery.comvb9144523534524/wjl/frmTip.frx
  • cvery.comvb9144523534524/wjl/frmTip.log
  • cvery.comvb9144523534524/wjl/frmguanyu.frm
  • cvery.comvb9144523534524/wjl/frmguanyu.frx
  • cvery.comvb9144523534524/wjl/frmguanyu.log
  • cvery.comvb9144523534524/wjl/green.skn
  • cvery.comvb9144523534524/wjl/guanggao.swf
  • cvery.comvb9144523534524/wjl/pictureCase.exp
  • cvery.comvb9144523534524/wjl/pictureCase.lib
  • cvery.comvb9144523534524/wjl/pictureCase.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    5cc573ef06b82a21b444056dcf849e7a


    Headers

    Imports

    Exports

    Sections

  • cvery.comvb9144523534524/wjl/shuijingzhilian.skn
  • cvery.comvb9144523534524/wjl/t.xls
    .xls windows office2003
  • cvery.comvb9144523534524/wjl/thth.bmp
  • cvery.comvb9144523534524/wjl/thth2.bmp
  • cvery.comvb9144523534524/wjl/ththqueren.bmp
  • cvery.comvb9144523534524/wjl/ththtishi.bmp
  • cvery.comvb9144523534524/wjl/ththwen.bmp
  • cvery.comvb9144523534524/wjl/wqd.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/关于.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/工程1.PDM
  • cvery.comvb9144523534524/wjl/工程1.vbp
  • cvery.comvb9144523534524/wjl/工程1.vbw
  • cvery.comvb9144523534524/wjl/工程2.exp
  • cvery.comvb9144523534524/wjl/工程2.lib
  • cvery.comvb9144523534524/wjl/工程2.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comvb9144523534524/wjl/工程2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    5cc573ef06b82a21b444056dcf849e7a


    Headers

    Imports

    Exports

    Sections

  • cvery.comvb9144523534524/wjl/工程2.vbp
  • cvery.comvb9144523534524/wjl/工程2.vbw
  • cvery.comvb9144523534524/wjl/帮助/0108.gif
    .gif
  • cvery.comvb9144523534524/wjl/帮助/1.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/1.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/2.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/3.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/4.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/5.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/Form1.frm
  • cvery.comvb9144523534524/wjl/帮助/Hearts.ico
  • cvery.comvb9144523534524/wjl/帮助/MSSCCPRJ.SCC
  • cvery.comvb9144523534524/wjl/帮助/UntitledFrameset-10.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/kaishi.htm
    .js
  • cvery.comvb9144523534524/wjl/帮助/sdc.gif
    .gif
  • cvery.comvb9144523534524/wjl/帮助/xi10.ani
  • cvery.comvb9144523534524/wjl/帮助/修改.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/助手.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/十分感.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/工程1.vbp
  • cvery.comvb9144523534524/wjl/帮助/工程1.vbw
  • cvery.comvb9144523534524/wjl/帮助/更新.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/未命名.bmp
  • cvery.comvb9144523534524/wjl/帮助/未命名.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/未标题-1 拷贝.jpg
    .jpg
  • cvery.comvb9144523534524/wjl/帮助/查询.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/添加.htm
    .html
  • cvery.comvb9144523534524/wjl/帮助/皮肤.htm
    .html
  • cvery.comvb9144523534524/wjl/组1.vbg
  • cvery.comvb9144523534524/wjl/闪屏.jpg
    .jpg
  • cvery.comvb9144523534524/下载说明.htm
    .html .js polyglot