General

  • Target

    b38ab5873c3e94756e88cd3fb5ecda21_JaffaCakes118

  • Size

    2.3MB

  • MD5

    b38ab5873c3e94756e88cd3fb5ecda21

  • SHA1

    738380ecbf0766ac8c1b95861ab40ed1fa98d211

  • SHA256

    e5adace47601a1c687c38e8744fb0576914af86f9209a87821a947fca290a94e

  • SHA512

    f875ef21378ca4f0c6cac3ec59f94bee7bcaa95e0a6b8237255a42c5a111de880c4efba76ea5819059a6be4f6e3b50fef73bbbdf85647a78fed6865fbb390d01

  • SSDEEP

    49152:Sa5a3B9wylJOwgzxM6T0OJf9GPUwCWyNcHpQcmspwA7c42g/EZFv4:SL3LRJQxMKJf0jCWppQcms2AT2iEZW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • b38ab5873c3e94756e88cd3fb5ecda21_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FileInfo.dll
    .dll windows:4 windows x86 arch:x86

    f6e384a477f8efc14029bba8fca9bd0f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/option.ini
  • 7zNew.data
    .7z
  • Benchmark.data
  • HaoZip.chm
    .chm
  • HaoZip.exe
    .exe windows:4 windows x86 arch:x86

    c51dd2ec7061241d0771ea482e2e1dda


    Headers

    Imports

    Sections

  • HaoZipC.exe
    .exe windows:4 windows x86 arch:x86

    0187e922614d6328579e4284cf5bd745


    Headers

    Imports

    Sections

  • HaoZipCompress.dll
    .dll windows:4 windows x86 arch:x86

    371d85cf4d62b2c0a12585018c4a25c1


    Headers

    Imports

    Exports

    Sections

  • HaoZipExt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0f8b12da3b6426083c572a4c3ac67c27


    Headers

    Imports

    Exports

    Sections

  • HaoZipFormats.dll
    .dll windows:4 windows x86 arch:x86

    7dbc0886e7bc5656f708e13592b1c520


    Headers

    Imports

    Exports

    Sections

  • HaoZipImage.dll
    .dll windows:4 windows x86 arch:x86

    6e84f7a45fe84c794a87d9d9888559c6


    Headers

    Imports

    Exports

    Sections

  • HaoZipLoader.exe
    .exe windows:4 windows x86 arch:x86

    809ae753f9f1e103a08c521a2bb16a4c


    Headers

    Imports

    Sections

  • HaoZipShell.dll
    .dll windows:4 windows x86 arch:x86

    4005f392ba8cfc1228862a8ae3212e17


    Headers

    Imports

    Exports

    Sections

  • HaoZipUpdate.exe
    .exe windows:4 windows x86 arch:x86

    63e70110f0c2a62a835a6aa872efb043


    Headers

    Imports

    Sections

  • HaoZipVersion.dll
    .dll windows:4 windows x86 arch:x86

    24da43a02b017d3044f9525b61004f90


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Rar.exe
    .exe windows:5 windows x86 arch:x86

    4557b502e756a3acfc77d7bd38f2078e


    Headers

    Imports

    Sections

  • RarNew.data
    .rar
  • TarNew.data
  • UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/un.option.ini
  • ZipNew.data
  • lang/HaoZipLang_chs.dll
    .dll windows:4 windows x86 arch:x86

    d05906981f53157a7404d25bec1148ad


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • sfx/HaoZip7zSetup.sfx
    .exe windows:4 windows x86 arch:x86

    40a673059901dd8dccd98ef6db0a3740


    Headers

    Imports

    Sections

  • 好压免责声明.txt