Overview

overview

7

Static

static

7

MBXXGL.exe

windows7-x64

6

MBXXGL.exe

windows10-2004-x64

6

Msado15.dll

windows7-x64

3

Msado15.dll

windows10-2004-x64

3

Msdatgrd.dll

windows7-x64

3

Msdatgrd.dll

windows10-2004-x64

3

Msdatlst.dll

windows7-x64

3

Msdatlst.dll

windows10-2004-x64

3

Msjro.dll

windows7-x64

3

Msjro.dll

windows10-2004-x64

3

Pinyin.dll

windows7-x64

3

Pinyin.dll

windows10-2004-x64

3

Reg.dll

windows7-x64

6

Reg.dll

windows10-2004-x64

6

SETUP.exe

windows7-x64

7

SETUP.exe

windows10-2004-x64

7

_ISDEL.exe

windows7-x64

7

_ISDEL.exe

windows10-2004-x64

7

_setup.dll

windows7-x64

1

_setup.dll

windows10-2004-x64

1

mbxxgl.chm

windows7-x64

1

mbxxgl.chm

windows10-2004-x64

1

mfc42.dll

windows7-x64

3

mfc42.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a8e5029303a339dab6e010fa9eb005e8_JaffaCakes118

  • Size

    10.9MB

  • MD5

    a8e5029303a339dab6e010fa9eb005e8

  • SHA1

    dcd18a9b0130d9dce9341bee05bd799afcba19f6

  • SHA256

    0ff226f33131f38145b601114b29ff13b0f1ad8db7712ab60c0329ea78a5b5e4

  • SHA512

    af8f3a71489287ea39adec06f31b338199b933c582bb79b5141d9fd042c19e8ca92413b02abd5f6cca9c249feaf74f120e324d3e1c0d8e0b1e48a457bd5bfcb4

  • SSDEEP

    196608:zDvFWa9wZ/XvAfIGZSmC6WC5ry2PLIsqHEjlKVcxqf5p1i0A12TCOz9wXrTT2:zT/aZ/XvAgafCfCBy2PL4kjMCxqRpFks

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • a8e5029303a339dab6e010fa9eb005e8_JaffaCakes118
    .rar
  • AUTORUN.INF
  • DATA.TAG
  • MBXXGL.exe
    .exe windows:4 windows x86 arch:x86

    1f08f56a95d02265818e7c2471d7f74d


    Headers

    Imports

    Sections

  • Msado15.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52048b87d17893d5a4adbf0bc40478fd


    Headers

    Imports

    Exports

    Sections

  • Msdatgrd.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    876294974e137decb1d3a02e0db7e3b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Msdatlst.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    7d47a9ba1751cbe1e7774b194e0360b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Msjro.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3485e81aee4355d0f52c2e4e86e14ea3


    Headers

    Imports

    Exports

    Sections

  • Pinyin.dll
    .dll windows:1 windows x86 arch:x86

    741e621183c22251b8ccebf3718c4a9f


    Headers

    Imports

    Exports

    Sections

  • Reg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SETUP.EXE
  • SETUP.INI
  • XXGL.mdb
  • _INST32I.EX_
  • _ISDEL.EXE
  • _setup.dll
  • _sys1.cab
  • _user1.cab
  • andxj.wav
  • data1.cab
  • lang.dat
  • layout.bin
  • mbxxgl.chm
    .chm
  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • os.dat
  • setup.bmp
  • setup.ins
  • setup.lid
  • skb.wav
  • 下载说明.htm
    .html .js polyglot