Overview

overview

7

Static

static

3

ares_v1.9.5c1.4_3.exe

windows7-x64

7

ares_v1.9.5c1.4_3.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

ASUpdate.dll

windows7-x64

3

ASUpdate.dll

windows10-2004-x64

3

TcpIpPatcherDll.dll

windows7-x64

3

TcpIpPatcherDll.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

ares.exe

windows7-x64

6

ares.exe

windows10-2004-x64

6

data/HomePage.html

windows7-x64

3

data/HomePage.html

windows10-2004-x64

3

tcpip_patcher.sys

windows7-x64

1

tcpip_patcher.sys

windows10-2004-x64

1

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a115f66100f7bc87f8a0adc027003fcc_JaffaCakes118

  • Size

    1.2MB

  • MD5

    a115f66100f7bc87f8a0adc027003fcc

  • SHA1

    ea0d772d8c3ad7806123b26ec7833f26cc783c79

  • SHA256

    b1f042a43624819680b6eb4b39074613f726dbea05232c9262e977585723838f

  • SHA512

    6f33d3575e804b387aebb16e91bd22862ac1a3c0fdada433f29ee4f2ae16d60321fbceb2bd7d2db29f5bc7767e9a08446075ca9902b70173d324c742dd861259

  • SSDEEP

    24576:O4TtV5Dw2ggu2i5aOB+I+pL3Nh9eigaB1sNPGc0vjesAmww6aEsCh:DBrdWpYW6bNeiggYGcQKsAmkh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • a115f66100f7bc87f8a0adc027003fcc_JaffaCakes118
    .rar
  • ares_v1.9.5c1.4_3.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ASUpdate.dll
    .dll windows:4 windows x86 arch:x86

    56cbecc9df5b9c13b50d1dc6afaac7b9


    Headers

    Imports

    Exports

    Sections

  • TcpIpPatcherDll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ares.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • data/Blocked.txt.sample
  • data/Blocked_Keywords.txt.sample
  • data/ChanListFilter.txt
  • data/GUI/General/chat.bmp
  • data/GUI/General/emotic.bmp
  • data/GUI/General/libbig.bmp
  • data/GUI/General/logo.bmp
  • data/GUI/General/mimesmall.bmp
  • data/GUI/General/mshareset.bmp
  • data/GUI/General/player.bmp
  • data/GUI/General/playlistbtns.bmp
  • data/GUI/General/prefs.txt
  • data/GUI/General/searchpnl.bmp
  • data/GUI/General/searchstars.bmp
  • data/GUI/General/tabsbig.bmp
  • data/GUI/General/tabssmall.bmp
  • data/GUI/General/transfer.bmp
  • data/GUI/General/webanim.bmp
  • data/HomePage.dat
    .html
  • data/P2PFilter.txt
  • data/anonproxies.txt.sample
  • lang/chinese_cn.txt
  • tcpip_patcher.sys
    .sys windows:5 windows x86 arch:x86

    def55ae036c471c546b3dd031f003014


    Headers

    Imports

    Sections

  • 安装说明.url
    .url