General

  • Target

    c7a7349b7f8661fe4f7aab50e646907b_JaffaCakes118

  • Size

    12.3MB

  • MD5

    c7a7349b7f8661fe4f7aab50e646907b

  • SHA1

    d9df40637aee8d792e7795d3a8480f1750df7504

  • SHA256

    b77c9868fe8283f2eff9cefc327b9f0625f9a75265235521a28c5940ee040450

  • SHA512

    934cf691c59670af5e1e6f11fda267b215f1f278116ceb600664776806d2f337198fc25c69ebc242c6ab1c847cb0157d8f7ebe84b77a7fb968bbaee76b4c3f7d

  • SSDEEP

    196608:yk/q+LJQnVb0ls6LSDpVQEY2fSRyPwU/jUPN3kPC4N6x1okVns9OSaZpohTZYACB:yk/q+en46bfSRyPwUw1o6Ak2oSaNAcT

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 9 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • c7a7349b7f8661fe4f7aab50e646907b_JaffaCakes118
    .rar
  • ClientTest.rar
    .rar
  • 客户端工具/AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 客户端工具/ClientMgr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 客户端工具/RegTlb.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 客户端工具/WnList.sub
    .html .js polyglot
  • 客户端工具/YituServer.tlb
  • 客户端工具/login.swf
  • 客户端工具/midas.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7aeeb458f15e4b68d4729b9a139b14d9


    Headers

    Imports

    Exports

    Sections

  • 客户端工具/qtintf.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 客户端工具/unrar.dll
    .dll windows:4 windows x86 arch:x86

    77c3319357948fd2ae09342f71002423


    Headers

    Imports

    Exports

    Sections

  • 客户端工具/说明.txt
  • Servertest.rar
    .rar
  • 服务端/AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/Computer.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/Data/Computer.mdb
  • 服务端/Data/Computer.rar
    .rar
  • Computer.mdb
  • 服务端/Data/ITKragon.ldf
  • 服务端/Data/ITKragon.mdf
  • 服务端/IPSearcher.dll
    .dll windows:4 windows x86 arch:x86

    3e9c9276e79ebd315c2030c4a9803187


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 服务端/QQWry.Dat
  • 服务端/RegTlb.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/YituServer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/buysale.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/midas.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7aeeb458f15e4b68d4729b9a139b14d9


    Headers

    Imports

    Exports

    Sections

  • 服务端/qtintf.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 服务端/scktsrvr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/unrar.dll
    .dll windows:4 windows x86 arch:x86

    77c3319357948fd2ae09342f71002423


    Headers

    Imports

    Exports

    Sections

  • 服务端/说明.txt
  • 下载说明.htm
    .html .js polyglot