Overview

overview

7

Static

static

3

ArmAccess.dll

windows7-x64

1

ArmAccess.dll

windows10-2004-x64

1

DialUp.dll

windows7-x64

1

DialUp.dll

windows10-2004-x64

1

OLREG.htm

windows7-x64

1

OLREG.htm

windows10-2004-x64

1

RunAsService.exe

windows7-x64

3

RunAsService.exe

windows10-2004-x64

3

RunMCRFile.exe

windows7-x64

1

RunMCRFile.exe

windows10-2004-x64

1

UIComponents.dll

windows7-x64

1

UIComponents.dll

windows10-2004-x64

1

Uninst.exe

windows7-x64

7

Uninst.exe

windows10-2004-x64

7

WhoAmI.exe

windows7-x64

1

WhoAmI.exe

windows10-2004-x64

1

Win98code.dll

windows7-x64

1

Win98code.dll

windows10-2004-x64

1

_Loader.exe

windows7-x64

7

_Loader.exe

windows10-2004-x64

7

_apmousedll.dll

windows7-x64

1

_apmousedll.dll

windows10-2004-x64

1

_b_keydll.dll

windows7-x64

1

_b_keydll.dll

windows10-2004-x64

1

_keydll.dll

windows7-x64

1

_keydll.dll

windows10-2004-x64

1

_prog.exe

windows7-x64

7

_prog.exe

windows10-2004-x64

7

_prog_service.bat

windows7-x64

7

_prog_service.bat

windows10-2004-x64

7

_prog_wd.exe

windows7-x64

1

_prog_wd.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    66d077b1118f85da6cd990c14da0444e_JaffaCakes118

  • Size

    1.5MB

  • MD5

    66d077b1118f85da6cd990c14da0444e

  • SHA1

    9769e74c28000794df6a3f5e5b36c3f46437184a

  • SHA256

    2bb9aea2fcf58cb0d4c564e465b6ec1453e3bd08990a8241e9c1017791ad0d64

  • SHA512

    5bb46fd31e09fc4cf95aa312f9837ba3c37e41ab270ac93277ee761bc010bcd388887a47ed1b01317d76066dda9c9b9684d6a05d7f653d8a2eec1bc2197d3f9e

  • SSDEEP

    24576:acFl/UB2qO+A2yKyYKNWM0rxi4cXjuPP3DL7BniJgdy2bJQX5tNdZJ6trW2iGXnT:Plaw+A7KyDNWnxi4cXjuPPflniJgk2Nl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 66d077b1118f85da6cd990c14da0444e_JaffaCakes118
    .rar
  • ArmAccess.dll
    .dll windows:4 windows x86 arch:x86

    d1e10a04ad85a14abc67c0f2a2f79aed


    Headers

    Imports

    Exports

    Sections

  • Custom/下载说明.htm
    .html .js polyglot
  • DemoFile.4pk
  • DialUp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    202d258b7702c2b38767b7fc988b9a2a


    Headers

    Imports

    Exports

    Sections

  • OLREG.HTM
    .html
  • README.TXT
  • RunAsService.exe
    .exe windows:4 windows x86 arch:x86

    236da76da9655f623cdb85fb8bcd33ac


    Headers

    Imports

    Sections

  • RunMCRFile.exe
    .exe windows:4 windows x86 arch:x86

    84256d121c22692e8c3c461ce237e5bb


    Headers

    Imports

    Sections

  • SONIC.WAV
  • UIComponents.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b4fbc82b6f70167027adf47a97955ec


    Headers

    Imports

    Exports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    efcfc6e7622396e9f04783b3de8ab7da


    Headers

    Imports

    Sections

  • WhoAmI.exe
    .exe windows:4 windows x86 arch:x86

    91efb78109cc58ad3ccf2c61599850bb


    Headers

    Imports

    Sections

  • Win98code.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7942838106132cda0db44d9e93bcc63d


    Headers

    Imports

    Exports

    Sections

  • _Loader.exe
    .exe windows:4 windows x86 arch:x86

    435f8c1bc657f93fe10cafeeb0757f6b


    Headers

    Imports

    Sections

  • _apmousedll.dll
    .dll windows:4 windows x86 arch:x86

    38e37a124be4cc891a2ba48db749df03


    Headers

    Imports

    Exports

    Sections

  • _b_keydll.dll
    .dll windows:4 windows x86 arch:x86

    5678036c53abef8e904c6373a2e0ddad


    Headers

    Imports

    Exports

    Sections

  • _keydll.dll
    .dll windows:4 windows x86 arch:x86

    5678036c53abef8e904c6373a2e0ddad


    Headers

    Imports

    Exports

    Sections

  • _prog.exe
    .exe windows:4 windows x86 arch:x86

    aaa734bdf233e7b6248c47353f08a15f


    Headers

    Imports

    Sections

  • _prog.exe.manifest
    .xml
  • _prog_service.bat
  • _prog_wd.exe
    .exe windows:4 windows x86 arch:x86

    c43e2dc7726c9f825d40753116a72c2a


    Headers

    Imports

    Sections

  • admin.ini
  • cui.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • help.chm
    .chm
  • ic_keyb.ico
  • license.txt
  • mtwbho.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ae5d135654ad8dc6aea6afdc85cbe929


    Headers

    Imports

    Exports

    Sections

  • options.ini
  • pk32.exe
    .exe windows:4 windows x86 arch:x86

    e06bc8177dec2c2e877d5ec941b976c4


    Headers

    Imports

    Sections

  • pkother.htm
    .html
  • pmlt_default_listonly.htm
  • pmlt_default_withmacro.htm
  • register.txt
  • resdll.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0e0da199723f21b51e48d3655e71fba


    Headers

    Imports

    Sections

  • setup.exe.manifest
    .xml
  • users.ini
  • 下载说明.htm
    .html .js polyglot