Overview

overview

5

Static

static

3

alasend/AlsChsRes.dll

windows7-x64

1

alasend/AlsChsRes.dll

windows10-2004-x64

1

alasend/Ga...12.dll

windows7-x64

3

alasend/Ga...12.dll

windows10-2004-x64

3

alasend/Ga...13.dll

windows7-x64

3

alasend/Ga...13.dll

windows10-2004-x64

3

alasend/Ga...in.dll

windows7-x64

3

alasend/Ga...in.dll

windows10-2004-x64

3

alasend/Ga...24.dll

windows7-x64

3

alasend/Ga...24.dll

windows10-2004-x64

3

alasend/Ga...33.dll

windows7-x64

3

alasend/Ga...33.dll

windows10-2004-x64

3

alasend/Ga...71.dll

windows7-x64

5

alasend/Ga...71.dll

windows10-2004-x64

3

alasend/Ga...72.dll

windows7-x64

5

alasend/Ga...72.dll

windows10-2004-x64

3

alasend/Ga...73.dll

windows7-x64

3

alasend/Ga...73.dll

windows10-2004-x64

3

alasend/Ga...74.dll

windows7-x64

3

alasend/Ga...74.dll

windows10-2004-x64

3

alasend/Ga...75.dll

windows7-x64

5

alasend/Ga...75.dll

windows10-2004-x64

3

alasend/Ga...76.dll

windows7-x64

3

alasend/Ga...76.dll

windows10-2004-x64

3

alasend/In...ex.htm

windows7-x64

3

alasend/In...ex.htm

windows10-2004-x64

3

alasend/NtSvc.dll

windows7-x64

3

alasend/NtSvc.dll

windows10-2004-x64

3

alasend/PKUtil.dll

windows7-x64

3

alasend/PKUtil.dll

windows10-2004-x64

3

alasend/PsdMAid.dll

windows7-x64

3

alasend/PsdMAid.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ab81e9c89532397e28088a28919b1ec_JaffaCakes118

  • Size

    1.4MB

  • MD5

    8ab81e9c89532397e28088a28919b1ec

  • SHA1

    a2720b6ce62e92fd1ba951a789ed353b38addbe9

  • SHA256

    821e3443e3fb8610d9f7f571ac7701eb8dcf04e442d566cc05cf1054499837fe

  • SHA512

    d38e3f16196a0e9c67b065d52855da258ea78c8cd4894f28f34b053d65b06523f38930ea0200e23e2f6fd83881419f4cc49c4b0b261d3b4bd40032acbc62a0da

  • SSDEEP

    24576:ih1i7otqqBRpKjFXIYX7OItKkqISZKJvk9dXjKmoInXjlzsrxmcGOiYgWzgmPXmJ:ihHpRpK5XIYLOlkqkNEXOmoInxQrxmjD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ab81e9c89532397e28088a28919b1ec_JaffaCakes118
    .rar
  • alasend/AlsChsRes.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • alasend/CharAid.dat
    .sys windows:5 windows x86 arch:x86

    15785d0af51754f90d2d50ed4b7b28c2


    Headers

    Imports

    Sections

  • alasend/Config.ini
  • alasend/GameCtrlData/BB14.gfg
  • alasend/GameCtrlData/BD24.gfg
  • alasend/GameCtrlData/BD71.gfg
  • alasend/GameCtrlData/BD72.gfg
  • alasend/GameCtrlData/BD75.gfg
  • alasend/GameCtrlData/BD76.gfg
  • alasend/GameCtrlData/BE02.gfg
  • alasend/GameCtrlData/BE03.gfg
  • alasend/GameCtrlData/BE04.gfg
  • alasend/GameCtrlData/BE06.gfg
  • alasend/GameCtrlData/BE07.gfg
  • alasend/GameCtrlData/BE10.gfg
  • alasend/GameCtrlData/BE16.gfg
  • alasend/GameCtrlData/BE22.gfg
  • alasend/GameCtrlData/BE27.gfg
  • alasend/GameCtrlData/BE32.gfg
  • alasend/GameCtrlData/BE33.gfg
  • alasend/GameCtrlData/BE37.gfg
  • alasend/GameCtrlData/BE43.gfg
  • alasend/GameCtrlData/BE45.gfg
  • alasend/GameCtrlData/BE46.gfg
  • alasend/GameCtrlData/BE48.gfg
  • alasend/GameCtrlData/BE52.gfg
  • alasend/GameCtrlData/BE53.gfg
  • alasend/GameCtrlData/BE54.gfg
  • alasend/GameCtrlData/BE56.gfg
  • alasend/GameCtrlData/BE57.gfg
  • alasend/GameCtrlData/BE59.gfg
  • alasend/GameCtrlData/BE60.gfg
  • alasend/GameCtrlData/BE61.gfg
  • alasend/GameCtrlData/BE65.gfg
  • alasend/GameCtrlData/BE71.gfg
  • alasend/GameCtrlData/BE74.gfg
  • alasend/GameCtrlData/BE85.gfg
  • alasend/GameCtrlData/BE90.gfg
  • alasend/GameCtrlData/BF02.gfg
  • alasend/GameCtrlData/BF10.gfg
  • alasend/GameCtrlData/BF12.gfg
  • alasend/GameCtrlData/BF16.gfg
  • alasend/GameCtrlData/BF17.gfg
  • alasend/GameCtrlData/BF25.gfg
  • alasend/GameCtrlData/BF30.gfg
  • alasend/GameCtrlData/BF35.gfg
  • alasend/GameCtrlData/BF42.gfg
  • alasend/GameCtrlData/BF43.gfg
  • alasend/GameCtrlData/BF45.gfg
  • alasend/GameCtrlData/BF47.gfg
  • alasend/GameCtrlData/BF49.gfg
  • alasend/GameCtrlData/BF51.gfg
  • alasend/GameCtrlData/BF53.gfg
  • alasend/GameCtrlData/BF55.gfg
  • alasend/GameCtrlData/BF58.gfg
  • alasend/GameCtrlData/BF60.gfg
  • alasend/GameCtrlData/BF62.gfg
  • alasend/GameCtrlData/BF64.gfg
  • alasend/GameCtrlData/BF66.gfg
  • alasend/GameCtrlData/BF68.gfg
  • alasend/GameCtrlData/BF70.gfg
  • alasend/GameCtrlData/BF72.gfg
  • alasend/GameCtrlData/bb15.gfg
  • alasend/GameDLL/BB12.dll
    .dll windows:4 windows x86 arch:x86

    7614e53d6cdbbcdfa8b995be4356642e


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/BB13.dll
    .dll windows:4 windows x86 arch:x86

    94ab426d1aa4af6b8657df57b6027150


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/GameLoadin.dll
    .dll windows:4 windows x86 arch:x86

    46ba5c6441da147ce694af1dde2af8c5


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd24.dll
    .dll windows:4 windows x86 arch:x86

    3b44edf5aeef95c74d22c8a9d0f97d15


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd33.dll
    .dll windows:4 windows x86 arch:x86

    59c6254e320b4368a3bb9f72753c3b3d


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd71.dll
    .dll windows:4 windows x86 arch:x86

    a5458a6740d135dbdba6d9133c5ae35c


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd72.dll
    .dll windows:4 windows x86 arch:x86

    0edeb27e7a877d1eccdb76098c9579d2


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd73.dll
    .dll windows:4 windows x86 arch:x86

    bf4f502f5590d68577ce0d08d93e2917


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd74.dll
    .dll windows:4 windows x86 arch:x86

    6c3bd44a3adf00d160018f12d6552820


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd75.dll
    .dll windows:4 windows x86 arch:x86

    912001579ec0a92f46ab038d24f554e4


    Headers

    Imports

    Exports

    Sections

  • alasend/GameDLL/bd76.dll
    .dll windows:4 windows x86 arch:x86

    d00a303a96e5e82742cc986b600878ac


    Headers

    Imports

    Exports

    Sections

  • alasend/ICO/108.ico
  • alasend/ICO/CrossFire.ico
  • alasend/ICO/DNF.ico
  • alasend/ICO/Gw.ico
  • alasend/ICO/KartRider.ico
  • alasend/ICO/LaTaleClient.ico
  • alasend/ICO/LineageII.ico
  • alasend/ICO/MapleStory.ico
  • alasend/ICO/Mir.ico
  • alasend/ICO/QQR2.ico
  • alasend/ICO/SUN.ico
  • alasend/ICO/Silkroad.ico
  • alasend/ICO/Skype.ico
  • alasend/ICO/Thumbs.db
  • alasend/ICO/Warhammer.ico
  • alasend/ICO/bfyx.ico
  • alasend/ICO/camelot.ico
  • alasend/ICO/cibi.ico
  • alasend/ICO/cqqz.ico
  • alasend/ICO/dndlauncher.ico
  • alasend/ICO/eve.ico
  • alasend/ICO/fetion.ico
  • alasend/ICO/glworld.ico
  • alasend/ICO/hf.ico
  • alasend/ICO/hfdj.ico
  • alasend/ICO/hx01.ico
  • alasend/ICO/hx2.ico
  • alasend/ICO/hxmf.ico
  • alasend/ICO/ie.ico
  • alasend/ICO/jxsj.ico
  • alasend/ICO/kdxy.ico
  • alasend/ICO/mj.ico
  • alasend/ICO/msnmsgr.ico
  • alasend/ICO/msnmsgr8.ico
  • alasend/ICO/msnmsgr9.ico
  • alasend/ICO/my.ico
  • alasend/ICO/nmh.ico
  • alasend/ICO/popo.ico
  • alasend/ICO/qq.ico
  • alasend/ICO/qqgame.ico
  • alasend/ICO/qqhx.ico
  • alasend/ICO/qqxw.ico
  • alasend/ICO/rf.ico
  • alasend/ICO/runescape.ico
  • alasend/ICO/rxjh.ico
  • alasend/ICO/sq.ico
  • alasend/ICO/thx.ico
  • alasend/ICO/tlbb.ico
  • alasend/ICO/wangwang.ico
  • alasend/ICO/wendao.ico
  • alasend/ICO/wlwc.ico
  • alasend/ICO/wmgj.ico
  • alasend/ICO/woool.ico
  • alasend/ICO/wow.ico
  • alasend/ICO/wowcn.ico
  • alasend/ICO/xy3launch.ico
  • alasend/ICO/yahoo.ico
  • alasend/ICO/zhengtu.ico
  • alasend/ICO/zhuxian.ico
  • alasend/ICO/zx.ico
  • alasend/ICO/华夏online.ico
  • alasend/Info/index.mht
    .eml
  • email-html-1.txt
    .html
  • alasend/Info1/images/ShowLogo.bmp
  • alasend/Info1/images/Thumbs.db
  • alasend/Info1/images/ala.jpg
    .jpg
  • alasend/Info1/images/ban_but.gif
  • alasend/Info1/index.htm
    .html
  • alasend/License.txt
  • alasend/NtSvc.dll
    .dll windows:4 windows x86 arch:x86

    a084ce651c669a60197199600a036f5d


    Headers

    Imports

    Sections

  • alasend/PKUtil.dll
    .dll windows:4 windows x86 arch:x86

    8868a758ae65ac58ef5e9c7f599940a8


    Headers

    Imports

    Sections

  • alasend/PsdMAid.dll
    .dll windows:4 windows x86 arch:x86

    698cec8399b166a5f28f82b3aedcbf63


    Headers

    Imports

    Sections

  • alasend/Skin/Buttons.bmp
  • alasend/Skin/Checkbox.bmp
  • alasend/Skin/DlgTitle.bmp
  • alasend/Skin/ExButtonLeft.BMP
  • alasend/Skin/ExButtonRight.BMP
  • alasend/Skin/Radio.bmp
  • alasend/Skin/ShowLogo.bmp
  • alasend/Skin/Thumbs.db
  • alasend/Skin/bottom.bmp
  • alasend/Skin/close.bmp
  • alasend/Skin/left.bmp
  • alasend/Skin/max.bmp
  • alasend/Skin/min.bmp
  • alasend/Skin/restore.bmp
  • alasend/Skin/right.bmp
  • alasend/Skin/theme.ini
  • alasend/Skin/top.bmp
  • alasend/alasend.exe
    .exe windows:4 windows x86 arch:x86

    7f3b72e80543d1cdddade8a73d03165f


    Headers

    Imports

    Sections

  • alasend/alsUpdate.exe
    .exe windows:4 windows x86 arch:x86

    d5504a50ce60e2a392443a3a3cd962a9


    Headers

    Imports

    Sections

  • alasend/alscfgItem.pfg
  • alasend/mfc42.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    15526a399efc54049f061e8ef6944ab3


    Headers

    Imports

    Exports

    Sections

  • alasend/msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    25a432f77bad9086d8a8d5268b15ff1b


    Headers

    Imports

    Exports

    Sections

  • alasend/新云软件.url
    .url