Overview

overview

6

Static

static

3

MSCOMCT2.dll

windows7-x64

3

MSCOMCT2.dll

windows10-2004-x64

3

MSINET.dll

windows7-x64

3

MSINET.dll

windows10-2004-x64

3

MSVBVM60.dll

windows7-x64

3

MSVBVM60.dll

windows10-2004-x64

3

VB6CHS.dll

windows7-x64

1

VB6CHS.dll

windows10-2004-x64

1

Windows7�...��.bat

windows7-x64

3

Windows7�...��.bat

windows10-2004-x64

3

mcSpirit.exe

windows7-x64

6

mcSpirit.exe

windows10-2004-x64

6

restart.exe

windows7-x64

6

restart.exe

windows10-2004-x64

6

sab2spiritMate.exe

windows7-x64

3

sab2spiritMate.exe

windows10-2004-x64

3

ultratray.dll

windows7-x64

3

ultratray.dll

windows10-2004-x64

3

创建桌�...��.exe

windows7-x64

3

创建桌�...��.exe

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a758b79b8467fa6aae2c7b57c92d268e_JaffaCakes118

  • Size

    1.0MB

  • MD5

    a758b79b8467fa6aae2c7b57c92d268e

  • SHA1

    b12d940adccc6796bd12d78d5238503ddffa994b

  • SHA256

    c90590d84665829eb3415c7aee6febab416c6c33219f3856170df6c5ed29b135

  • SHA512

    ca6f6a3b64b79d62b415b53ffbbc393babf57e890be7c38b5882f787d7328fba884501859de828afb871f4436f8f7ca278e6f70232813c8e0a7d62a1f26f3484

  • SSDEEP

    24576:dw49c5KivqDK4wfqhJ//CAKxqvdD9ensQSS/p:dw4VivEwfgY1sVSR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • a758b79b8467fa6aae2c7b57c92d268e_JaffaCakes118
    .rar
  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    71e4dc10f7cc0c7bb2b43714bb9f46c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    d940cf5b3d0dfb340396c0608ef1a0c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Windows7注册控件.bat
  • light_blue.gif
    .gif
  • light_blue_dark.gif
    .gif
  • mcSpirit.dat
  • mcSpirit.exe
    .exe windows:4 windows x86 arch:x86

    b3465b93a8a79c531dc577c9f18b3b9f


    Headers

    Imports

    Sections

  • mcSpirit.inf
  • mcSpirit.ini
  • mcSpirit.txt
  • restart.exe
    .exe windows:4 windows x86 arch:x86

    8b099709eafd3d49cc13c3d0f7710e51


    Headers

    Imports

    Sections

  • sab2spiritMate.exe
    .exe windows:4 windows x86 arch:x86

    e942677214e665bddd68a75ae6e58096


    Headers

    Imports

    Sections

  • sab2spiritMate.ini
  • ultratray.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    f6c6547381df77b28881f61b9250a41f


    Headers

    Imports

    Exports

    Sections

  • 不使用循环点击的演示_mcspirit.ini
  • 不使用循环点击的演示_mcspirit.txt
  • 不使用循环点击的演示_sab2spiritMate.ini
  • 人工移动3秒鼠标点击等待30秒的演示_mcspirit.ini
  • 人工移动3秒鼠标点击等待30秒的演示_mcspirit.txt
  • 人工移动3秒鼠标点击等待30秒的演示_sab2spiritMate.ini
  • 创建桌面快捷方式.exe
    .exe windows:4 windows x86 arch:x86

    5301db6f41832a1e98c33b1ca11a3ccb


    Headers

    Imports

    Sections

  • 如何在Windows7下运行本软件.txt
  • 定时点击演示_mcspirit.ini
  • 定时点击演示_mcspirit.txt
  • 定时点击演示_sab2spiritMate.ini
  • 新云软件.url
    .url
  • 游戏点击模式演示一_mcspirit.ini
  • 游戏点击模式演示一_mcspirit.txt
  • 游戏点击模式演示一_sab2spiritMate.ini
  • 游戏点击演示二（防屏蔽）_mcspirit.ini
  • 游戏点击演示二（防屏蔽）_mcspirit.txt
  • 游戏点击演示二（防屏蔽）_sab2spiritMate.ini
  • 点击后自动输入文字_mcspirit.ini
  • 点击后自动输入文字_mcspirit.txt
  • 点击后自动输入文字_sab2spiritMate.ini
  • 点击演示_mcspirit.ini
  • 点击演示_mcspirit.txt
  • 点击演示_sab2spiritMate.ini
  • 点击间隔小于1秒的演示_mcspirit.ini
  • 点击间隔小于1秒的演示_mcspirit.txt
  • 点击间隔小于1秒的演示_sab2spiritMate.ini
  • 点击间隔相同的演示_mcspirit.ini
  • 点击间隔相同的演示_mcspirit.txt
  • 点击间隔相同的演示_sab2spiritMate.ini
  • 随机点击、点击后鼠标不回原位置的演示_mcspirit.ini
  • 随机点击、点击后鼠标不回原位置的演示_mcspirit.txt
  • 随机点击、点击后鼠标不回原位置的演示_sab2spiritMate.ini
  • 默认演示_mcspirit.ini
  • 默认演示_mcspirit.txt
  • 默认演示_sab2spiritMate.ini
  • 鼠标点击精灵帮助.txt
  • 鼠标点击精灵热键.txt