General

  • Target

    b2aa42fed833ca42955454d3f809c557_JaffaCakes118

  • Size

    2.0MB

  • MD5

    b2aa42fed833ca42955454d3f809c557

  • SHA1

    ace3806e39a6bce6eaa3c33f846bbd9a524d771b

  • SHA256

    f84fd7cbad9df4fd2adf640641370ffd12f342cf5e4c273109d231f9b1b584b9

  • SHA512

    2a8e8a5fecba68c235251881247a22f2a54875996293581bf6d0cede7d1bc426d554b418e36e4f6821a1ececc1a9724beb62ee0d0b1c63486fd68e0582e73620

  • SSDEEP

    49152:S4giqtwz4x3AH1J2kPK6nTLYElHf8PiO1Rmy6o2hyp/2SgcfZdwzLG1BIksA:S4giqqzkwHGk7TLYEtfKdFSyhgQQziBB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • b2aa42fed833ca42955454d3f809c557_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/option.ini
  • $R0
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • 7zNew.data
    .7z
  • HaoZip.chm
    .chm
  • HaoZip.exe
    .exe windows:4 windows x86 arch:x86

    55239a21a6813dedc2f8eb76ba3f01eb


    Headers

    Imports

    Sections

  • HaoZipC.exe
    .exe windows:4 windows x86 arch:x86

    a1bbff8294f1350d497180a7eefc5ce5


    Headers

    Imports

    Sections

  • HaoZipUpdate.exe
    .exe windows:4 windows x86 arch:x86

    3c45d941c395a803914eed4956f5d94f


    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • TarNew.data
  • ZipNew.data
  • lang/HaoZipLang_chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 好压免责声明.txt