General

  • Target

    b93dae8c39e472cf92b7dba6ad8cb0e2_JaffaCakes118

  • Size

    7.0MB

  • MD5

    b93dae8c39e472cf92b7dba6ad8cb0e2

  • SHA1

    123ee0a30670bb96f226e390271e67847c3515c4

  • SHA256

    50564291fc9669d8c20ed0a5dcd0c9ffc39f32bc547ea8e90a5c9b8f011544cd

  • SHA512

    b280ae79020e6afed37008c54a9b58c4098c6a7d284470d22ff3277d5fe401fc64bc06baf7a026916d73e4a47ee2ec9923f42a367710669e3d2914fb380165a3

  • SSDEEP

    196608:7aKTYP56yN3NsQv+/zPldnq4Ze5avjYglt2TRqfD:7aGjTz7sgH218D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • b93dae8c39e472cf92b7dba6ad8cb0e2_JaffaCakes118
    .rar
  • setup/SETUP.LST
  • setup/setup.exe
    .exe windows:4 windows x86 arch:x86

    9e36d5e1cceea0330fdd26492ec00ae2


    Headers

    Imports

    Sections

  • setup/下载说明.htm
    .html .js polyglot
  • setup/医院药库管理系统.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • Actbar2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    9f262eb83e85d8365a8323afd14ccf1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DAO360.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d022181ef383754f09a73770eacb1a25


    Headers

    Imports

    Exports

    Sections

  • EXPSRV.DLL
    .dll windows:4 windows x86 arch:x86

    548d9bb3cc3953486c58d739eb336b48


    Headers

    Imports

    Exports

    Sections

  • FLXGDCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    50ccb1d881ea89a41a10cced45c79649


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSFLXGRD.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    138f160cfefa07306f399d9bfa41ad11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSJET40.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    6b03f957ec50ed742415a7159a1cd367


    Headers

    Imports

    Exports

    Sections

  • MSJINT40.DLL
    .dll windows:4 windows x86 arch:x86

    1806b74271ce3922c63ebda12c052a1b


    Headers

    Imports

    Exports

    Sections

  • MSJTER40.DLL
    .dll windows:4 windows x86 arch:x86

    8628563dce3fee3ed1c0d63199e9c0f7


    Headers

    Imports

    Exports

    Sections

  • MSJTES40.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    81d157409c3be67c74350b1865555e38


    Headers

    Imports

    Exports

    Sections

  • MSRD2X40.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e045ee94e7186406e189e2e51153e4b


    Headers

    Imports

    Exports

    Sections

  • MSRD3X40.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    799434d5f4eb9f55b783517bd250955e


    Headers

    Imports

    Exports

    Sections

  • MSREPL40.DLL
    .dll windows:4 windows x86 arch:x86

    9e34e65a09188e127f28d654f328d4b7


    Headers

    Imports

    Sections

  • MSSTDFMT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    76114d56c8c1282d8a004aefa0d9031b


    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a48bc65cb80524393ed5ceb59b94e776


    Headers

    Imports

    Exports

    Sections

  • MSWDAT10.DLL
    .dll windows:4 windows x86 arch:x86

    ce6231610f8ff308ee82b0d75717c546


    Headers

    Imports

    Sections

  • MSWSTR10.DLL
    .dll windows:4 windows x86 arch:x86

    81c935b74e26382d1e9934cd86736b89


    Headers

    Imports

    Sections

  • MsKiTool.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c810bdf74075f7bd7b8d5862e2300b1f


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDFTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Setup1.exe
    .exe windows:4 windows x86 arch:x86

    d6cd751c7a51ebad0ad70ceea824dce9


    Headers

    Imports

    Sections

  • TABCTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VB5DB.DLL
    .dll windows:4 windows x86 arch:x86

    2824fcddda9a05ec563c0e7037537798


    Headers

    Imports

    Exports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • VBAJET32.DLL
    .dll windows:4 windows x86 arch:x86

    8e4cca56f88f6d206aa5a20cdaf1a0c8


    Headers

    Imports

    Exports

    Sections

  • calendar.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    cae704410b2c426ea75e8092d9f7619a


    Headers

    Imports

    Exports

    Sections

  • ҽԺҩ������ϵͳ.exe
    .exe windows:4 windows x86 arch:x86

    b4c19f03a22ac786c4e41b0044756021


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 安装说明书.txt
  • 数据库/QiHISce.mdb
  • 数据库/下载说明.htm
    .html .js polyglot