Overview

overview

3

Static

static

3

cvery.comd...ad.dll

windows7-x64

1

cvery.comd...ad.dll

windows10-2004-x64

1

cvery.comd...ll.bat

windows7-x64

1

cvery.comd...ll.bat

windows10-2004-x64

1

cvery.comd...ad.asp

windows7-x64

3

cvery.comd...ad.asp

windows10-2004-x64

3

cvery.comd...up.vbs

windows7-x64

1

cvery.comd...up.vbs

windows10-2004-x64

1

cvery.comd...t1.exe

windows7-x64

1

cvery.comd...t1.exe

windows10-2004-x64

1

cvery.comd...ll.bat

windows7-x64

1

cvery.comd...ll.bat

windows10-2004-x64

1

cvery.comd...Obj.js

windows7-x64

3

cvery.comd...Obj.js

windows10-2004-x64

3

cvery.comd...ile.js

windows7-x64

3

cvery.comd...ile.js

windows10-2004-x64

3

cvery.comd...��.url

windows7-x64

1

cvery.comd...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6385b9a325c9632abd8fe0fbc49897c5_JaffaCakes118

  • Size

    297KB

  • MD5

    6385b9a325c9632abd8fe0fbc49897c5

  • SHA1

    ee86135b5058a9456b78075833f9a6cbb2be4b6d

  • SHA256

    3523f8b2107c473b709c9f57b45216128d81a1cf579361c4d11dd614d0f38187

  • SHA512

    d311cff2b58d27a15cc878557de522916703f80d4e362eabb8f3130083081a3a56801863d47a4571f861e70a0a8c751d53a131536e8f4f5113a3c353819c7f48

  • SSDEEP

    6144:/axEWRZAbvLVakh0fC+l7jbCXW/MDUtwSwzifKgojUrnwa+vw:34kBakuTRGbQeSwzibKQwI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6385b9a325c9632abd8fe0fbc49897c5_JaffaCakes118
    .rar
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.cfg
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.dof
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.dpr
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.res
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload.tlb
  • cvery.comdel630543535672455/DDKFileUpload/DDKFileUpload_TLB.pas
  • cvery.comdel630543535672455/DDKFileUpload/FileUpload.asp
    .html .vbs polyglot
  • cvery.comdel630543535672455/DDKFileUpload/delall.bat
  • cvery.comdel630543535672455/DDKFileUpload/reg_upload.asp
  • cvery.comdel630543535672455/DDKFileUpload/untFileUpload.pas
  • cvery.comdel630543535672455/DDKFileUpload/untFunctions.pas
  • cvery.comdel630543535672455/DDKFileUpload/up.asp
    .vbs
  • cvery.comdel630543535672455/Project1.cfg
  • cvery.comdel630543535672455/Project1.dof
  • cvery.comdel630543535672455/Project1.dpr
  • cvery.comdel630543535672455/Project1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.comdel630543535672455/Project1.res
  • cvery.comdel630543535672455/Unit1.dfm
  • cvery.comdel630543535672455/Unit1.pas
  • cvery.comdel630543535672455/delall.bat
  • cvery.comdel630543535672455/namelist.xml
    .xml
  • cvery.comdel630543535672455/untDDkFileUpThread.pas
  • cvery.comdel630543535672455/untDataTransmit.pas
  • cvery.comdel630543535672455/untGlobaFun.pas
  • cvery.comdel630543535672455/untHttpConnection.pas
  • cvery.comdel630543535672455/untHttpDownload.pas
  • cvery.comdel630543535672455/untHttpHeaderObj.pas
  • cvery.comdel630543535672455/untHttpObj.pas
    .js
  • cvery.comdel630543535672455/untHttpSocket.pas
  • cvery.comdel630543535672455/untUploadFile.pas
    .js
  • cvery.comdel630543535672455/下载说明.htm
    .html .js polyglot
  • cvery.comdel630543535672455/阅读器下载.url