Overview

overview

7

Static

static

3

AMLPages-v...en.exe

windows7-x64

7

AMLPages-v...en.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AmlAssistDirect.exe

windows7-x64

6

AmlAssistDirect.exe

windows10-2004-x64

7

AmlPages.chm

windows7-x64

1

AmlPages.chm

windows10-2004-x64

1

AmlPages.exe

windows7-x64

3

AmlPages.exe

windows10-2004-x64

3

Plugins/AmlAssist.dll

windows7-x64

3

Plugins/AmlAssist.dll

windows10-2004-x64

3

Plugins/IE2Aml.dll

windows7-x64

3

Plugins/IE2Aml.dll

windows10-2004-x64

3

autotext.ps1

windows7-x64

3

autotext.ps1

windows10-2004-x64

3

colordlg.dll

windows7-x64

3

colordlg.dll

windows10-2004-x64

3

howtoreg.htm

windows7-x64

3

howtoreg.htm

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

AMLPages-v...��.url

windows7-x64

1

AMLPages-v...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4eb28624c151151e0e7fd7d5efbfe7c_JaffaCakes118

  • Size

    763KB

  • MD5

    a4eb28624c151151e0e7fd7d5efbfe7c

  • SHA1

    8ce30d0908e43430cf84f8a82e054046ec7440fa

  • SHA256

    2d6d9d4acdc21364465b65a8bf59297666d8b8de04ae588b423360611290af93

  • SHA512

    0b45aa82a1c6b71340fee16666a12ce6de465c9ddd9c9fba65340b7997feda4d7a5be9ea5d5f9c9cdca43369f142d418ca11b760822d80f03db39fd8acc05713

  • SSDEEP

    12288:9KzPV8Rd/fqiMYCfhz/VoSlaolxmpMgpq+QagQxpQDE0gnszgVuQYgIrFRDBof:9SV8v/fLM3fhDOSOPqZaIOJEVgIqf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • a4eb28624c151151e0e7fd7d5efbfe7c_JaffaCakes118
    .rar
  • AMLPages-v9.08.1997b/amlpages_setup_en.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioShortcuts.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • 1c.ash
  • AmlAssistDirect.exe
    .exe windows:4 windows x86 arch:x86

    127518ed0362673f47dd5aaa3fd8f6a8


    Headers

    Imports

    Sections

  • AmlPages.chm
    .chm
  • AmlPages.exe
    .exe windows:4 windows x86 arch:x86

    14d8c644e66ca618932aaf98809b65b9


    Headers

    Imports

    Exports

    Sections

  • AsCarc.ash
  • Plugins/AmlAssist.dll
    .dll windows:4 windows x86 arch:x86

    cc57937dce4f8084c5358c7bdf2f63ea


    Headers

    Imports

    Exports

    Sections

  • Plugins/IE2Aml.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d8894d93420b5547fbb917b50cd20150


    Headers

    Imports

    Exports

    Sections

  • ash.ash
  • autotext.atx
    .ps1
  • cell.gif
    .gif
  • colordlg.dll
    .dll windows:4 windows x86 arch:x86

    b7d2bc182f151ed90d67648133315631


    Headers

    Imports

    Exports

    Sections

  • cpp.ash
  • delphi.ash
  • email.ash
  • howtoreg.htm
    .html
  • html.ash
  • lines.gif
    .gif
  • mfc.ash
  • nsis.ash
  • perl.ash
  • sample.apd
  • splash.jpg
    .jpg
  • splitter.gif
    .gif
  • sql.ash
  • tips.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • vb.ash
  • voter.ini
  • wtl.ash
  • AMLPages-v9.08.1997b/readme.txt
  • AMLPages-v9.08.1997b/whatnews.txt
  • AMLPages-v9.08.1997b/新云软件.url
    .url