General

  • Target

    8ab4734e18a97657fae7dcca53d3e245_JaffaCakes118

  • Size

    1.5MB

  • MD5

    8ab4734e18a97657fae7dcca53d3e245

  • SHA1

    6f0e0ca388197f8325c765a39e2f5c360d0ca279

  • SHA256

    d000f5828193e722f922f4c06e766fae248e7c63ba97d8b4979f9ce52b8bfe4c

  • SHA512

    fc4d61e2fdab97c9ff9ee9d43f996bbec7012b599daec19e30213d78351f27473c8eb1683accada390df0b48382c686d66516463562790b52a90ef0010ffdd9e

  • SSDEEP

    49152:ptVaYd2Zyr3e48nfzD364/l4P/RiwBelPUqaQ:pOQ2IzrqzDX/2P/Rv8lP73

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ab4734e18a97657fae7dcca53d3e245_JaffaCakes118
    .rar
  • 铁通宽带拨号客户端/DefaultAD.html
    .html
  • 铁通宽带拨号客户端/DiaConnect.dll
    .dll windows:4 windows x86 arch:x86

    a4a3bcecd8764b1cad9641e0f2e1738e


    Headers

    Imports

    Exports

    Sections

  • 铁通宽带拨号客户端/MFC42D.DLL
    .dll windows:4 windows x86 arch:x86

    ef33d7efd42625d2ff4e6453a4c92b26


    Headers

    Imports

    Sections

  • 铁通宽带拨号客户端/MFCN42D.DLL
    .dll windows:4 windows x86 arch:x86

    28c47f7c0bf3898bead5ae82687cc452


    Headers

    Imports

    Sections

  • 铁通宽带拨号客户端/MFCO42D.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    fd9fb08c6bf77583a056ea711421b0ce


    Headers

    Imports

    Exports

    Sections

  • 铁通宽带拨号客户端/MSVCP60D.DLL
    .dll windows:4 windows x86 arch:x86

    21dddfd5fe74f22f16363fbf0df78894


    Headers

    Imports

    Exports

    Sections

  • 铁通宽带拨号客户端/MSVCRTD.DLL
    .dll windows:4 windows x86 arch:x86

    fb90d4c83d3b5c3c2ca8c36281c28bf7


    Headers

    Imports

    Exports

    Sections

  • 铁通宽带拨号客户端/TTDial.exe
    .exe windows:4 windows x86 arch:x86

    7355ab190284aaada7e8c74f91f32620


    Headers

    Imports

    Sections

  • 铁通宽带拨号客户端/Updata.exe
    .exe windows:4 windows x86 arch:x86

    c84642a589c39531d683fae42ef20063


    Headers

    Imports

    Sections

  • 铁通宽带拨号客户端/UpdateConfig.ini
  • 铁通宽带拨号客户端/WINHTTP5.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    51fe5d25f7545623e2edbdbc70ab8e25


    Headers

    Imports

    Exports

    Sections

  • 铁通宽带拨号客户端/help.chm
    .chm
  • 铁通宽带拨号客户端/image.jpg
    .jpg
  • 铁通宽带拨号客户端/proxy.manifest
    .xml