Overview

overview

4

Static

static

3

setup.exe

windows7-x64

4

setup.exe

windows10-2004-x64

4

ASYCFILT.dll

windows7-x64

3

ASYCFILT.dll

windows10-2004-x64

3

CALC.exe

windows7-x64

3

CALC.exe

windows10-2004-x64

3

CMDLGCHS.dll

windows7-x64

1

CMDLGCHS.dll

windows10-2004-x64

1

COMCAT.dll

windows7-x64

3

COMCAT.dll

windows10-2004-x64

3

COMDLG32.dll

windows7-x64

3

COMDLG32.dll

windows10-2004-x64

3

MSCC2CHS.dll

windows7-x64

1

MSCC2CHS.dll

windows10-2004-x64

1

MSCMCCHS.dll

windows7-x64

1

MSCMCCHS.dll

windows10-2004-x64

1

MSCOMCT2.dll

windows7-x64

3

MSCOMCT2.dll

windows10-2004-x64

3

MSCOMCTL.dll

windows7-x64

3

MSCOMCTL.dll

windows10-2004-x64

3

MSDXM.dll

windows7-x64

3

MSDXM.dll

windows10-2004-x64

3

MSSTDFMT.dll

windows7-x64

3

MSSTDFMT.dll

windows10-2004-x64

3

MSVBVM60.dll

windows7-x64

3

MSVBVM60.dll

windows10-2004-x64

3

OLEAUT32.dll

windows7-x64

3

OLEAUT32.dll

windows10-2004-x64

3

OLEPRO32.dll

windows7-x64

3

OLEPRO32.dll

windows10-2004-x64

3

SETUP1.exe

windows7-x64

3

SETUP1.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    955165d8ea6b8517e9b9b7e8d33bd355_JaffaCakes118

  • Size

    6.2MB

  • MD5

    955165d8ea6b8517e9b9b7e8d33bd355

  • SHA1

    6785fb0c859c67f8a86f585d5612d3204073b065

  • SHA256

    8a8a4db69a0b5cff7b306dd49834e245eebd525f394f3faa58a9c554c60a5031

  • SHA512

    256f16ab86a7cfcc4a85d84d64f0380b11fc2e5850875943275eca92975e1ec015454099b85dc405c272968f88f995ba89df2feb6ed8254776437fb2761a012c

  • SSDEEP

    98304:xchkbSnNhYlpcHxCXSSKafe/YDFbrg3M5qgPuS8ZSIinWJuXF1eaRXQmiubthEW:KhkbQAlwC0afDF/2M5uVIWs7WBubthEW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • 955165d8ea6b8517e9b9b7e8d33bd355_JaffaCakes118
    .rar
  • SETUP.LST
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 质检机构检验报告管理系统.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • BEGIN
  • CALC.EXE
    .exe windows:5 windows x86 arch:x86

    98feaf0f8f73f7370e6122d9107f77bd


    Headers

    Imports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSADO20.TLB
  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSDXM.OCX
    .dll regsvr32 windows:5 windows x86 arch:x86

    29de3e50d77746da96df66f9cf446fb8


    Headers

    Imports

    Exports

    Sections

  • MSSTDFMT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    76114d56c8c1282d8a004aefa0d9031b


    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    479485184984aadb89b6e8cf253117e6


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDFTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • WORDPAD.EXE
    .exe windows:5 windows x86 arch:x86

    68bcbd8432c47438fa2d2576416bb328


    Headers

    Imports

    Sections

  • �ʼ��������鱨������ϵͳ.exe
    .exe windows:4 windows x86 arch:x86

    043852e3412d084840aeca7d8c99bfd6


    Headers

    Imports

    Sections