General

  • Target

    bc7ec5d97a9d9d5ae8084b58cad35aa5_JaffaCakes118

  • Size

    10.8MB

  • MD5

    bc7ec5d97a9d9d5ae8084b58cad35aa5

  • SHA1

    0703c382524400c82ac52d8def089553df37f01f

  • SHA256

    785b908e3918684bd7606732c31a068c97ab45b1182ed59ddeb82b57d0052697

  • SHA512

    75a48db36c960a6bf163a96b98c1054aca34d916d6e57eb4ebb6a8fde0372dad7e264f7ebd4453ed24f2ea59d8c0a31a3c08f03f2b47e2baec084a1b42ce32d2

  • SSDEEP

    196608:Qf7qnh3403Xh5lUPz1UkLRX/11XicoktMDQyk+wQo8d6x53x4OEk8Gt:Qf7qm03XlCzPv/XeQyk+JtMhdEEt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • bc7ec5d97a9d9d5ae8084b58cad35aa5_JaffaCakes118
    .rar
  • !)卸载.bat
  • !)绿化.bat
  • CoMgP32LOG.DLl
  • Readme.txt
  • atl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6bfedd40b55eb30555a20a996e076ef2


    Headers

    Imports

    Exports

    Sections

  • install.inf
  • ooabout.dll
    .dll windows:4 windows x86 arch:x86

    57d992e3ad8ec96efec20f1bbfd698fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oobctm.sys
    .sys windows:4 windows x86 arch:x86

    d28507692602618297c12a36a0c52345


    Headers

    Imports

    Sections

  • oocinst.exe
    .exe windows:4 windows x86 arch:x86

    81901c9af179c7f17c960e1e33ffce7f


    Code Sign

    Headers

    Imports

    Sections

  • oocinstm.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • oocipl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    42aa29c836b88206522a7d78b23b2bda


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oociplps.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e19b8805451b48bf851b351fb86cb2ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oociplrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oocisvrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodag.cip
  • oodag.exe
    .exe windows:4 windows x86 arch:x86

    e066fa538e815c8d6ff356a6abc6c3f4


    Headers

    Imports

    Sections

  • oodagmg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodagrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodagt.adm
  • oodbs.exe
    .sys windows:4 windows x86 arch:x86

    0a5b334dc08c31b5a5d50ddfaee55cba


    Headers

    Imports

    Sections

  • oodbsrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodcmd.exe
    .exe windows:4 windows x86 arch:x86

    f9df27ced1dcdb0d2e61bf84bc85e759


    Code Sign

    Headers

    Imports

    Sections

  • oodcmdrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodcnt.INI
  • oodcnt.exe
    .exe windows:4 windows x86 arch:x86

    ae045a5266af0965e439309e0af5f9c6


    Code Sign

    Headers

    Imports

    Sections

  • oodcoco.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1b4d6daa51355614b942e813f4ef6e3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodcocp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    98a1717cb05bdff1a559c2ec1c052ca2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodgui.adm
  • oodguirs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodjobd.dll
    .dll windows:4 windows x86 arch:x86

    db16325e9b8be5d15595c6a0d3d34f5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodjobdr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodpe.chm
    .chm
  • oodpeo.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e9ad6e8631ebb2078373c39a34482d45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodpep.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b111626bd20f51a0630a52330d3761e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodse.msc
  • oodseabr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodserwr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodsesur.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • oodsetpr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodshrs.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • oodsico.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    d35984148b57b39e397d2dab8cc614fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodssrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oodwiz.dll
    .dll windows:4 windows x86 arch:x86

    58a9cf0bbbad44dd765eb198d55bfdbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oodwizrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ooemc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a354bd237af622c0f2832532f678f586


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ooemc.msc
  • ooemcreg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    770ce699471186a547644f6d4f52daac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ooemcrs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oorci.exe
    .exe windows:4 windows x86 arch:x86

    d65481e245cd6a89b0e795ff96b4f50e


    Code Sign

    Headers

    Imports

    Sections

  • oorcim.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • oorcips.dll
    .dll windows:4 windows x86 arch:x86

    9e320a183108f54a6143961a435a8326


    Code Sign

    Headers

    Imports

    Sections

  • oorcirs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • oorwiz.dll
    .dll windows:4 windows x86 arch:x86

    4198f64a45fc970181f758a69d0b52c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oosu.dll
    .dll windows:4 windows x86 arch:x86

    d57584c06353a31fa3981a7b2a333ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ootip.dll
    .dll windows:4 windows x86 arch:x86

    f75f4627bf4da0140a6f9053c785d809


    Headers

    Imports

    Exports

    Sections

  • ootmapi.dll
    .dll windows:4 windows x86 arch:x86

    a55f3cb33dee3eb632abd6b2d4ea91f7


    Headers

    Imports

    Exports

    Sections

  • rpcdat01.htm
  • rpcdrv01.htm
  • rpcmn01.htm
  • rpscom01.htm
  • rpsmn01.htm
  • rpssum01.htm
  • uninst.inf
  • 安装说明.url
    .url