Overview

overview

7

Static

static

7

手机进�...te.dll

windows7-x64

3

手机进�...te.dll

windows10-2004-x64

3

手机进�...ar.dll

windows7-x64

3

手机进�...ar.dll

windows10-2004-x64

3

手机进�...ar.dll

windows7-x64

3

手机进�...ar.dll

windows10-2004-x64

3

手机进�...nu.dll

windows7-x64

3

手机进�...nu.dll

windows10-2004-x64

3

手机进�...ex.dll

windows7-x64

3

手机进�...ex.dll

windows10-2004-x64

3

手机进�...om.dll

windows7-x64

3

手机进�...om.dll

windows10-2004-x64

3

手机进�...p1.dll

windows7-x64

3

手机进�...p1.dll

windows10-2004-x64

3

手机进�...PI.dll

windows7-x64

3

手机进�...PI.dll

windows10-2004-x64

3

手机进�...DB.dll

windows7-x64

3

手机进�...DB.dll

windows10-2004-x64

3

手机进�...00.dll

windows7-x64

3

手机进�...00.dll

windows10-2004-x64

3

手机进�...id.dll

windows7-x64

3

手机进�...id.dll

windows10-2004-x64

3

手机进�...��.xls

windows7-x64

3

手机进�...��.xls

windows10-2004-x64

1

手机进�...��.xls

windows7-x64

3

手机进�...��.xls

windows10-2004-x64

1

手机进�...��.xls

windows7-x64

3

手机进�...��.xls

windows10-2004-x64

1

手机进�...��.xls

windows7-x64

3

手机进�...��.xls

windows10-2004-x64

1

手机进�...��.xls

windows7-x64

3

手机进�...��.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

Errors

Reason
office: invalid record header
Reason
office: invalid record header
Reason
office: invalid record header

General

  • Target

    cf5b3c72eccb441a44ca02dec794183e_JaffaCakes118

  • Size

    3.5MB

  • MD5

    cf5b3c72eccb441a44ca02dec794183e

  • SHA1

    0d649805f36e1e7f733078c0d04a8a9f3a1f5ad3

  • SHA256

    4e220d122e10dd92c672569c95273197e3333c85e419ae38504a36a8ee83e59b

  • SHA512

    22523a569a005efa8ee71a744b830629bcf59ab6bdf7adeafba696b8066418e4c0a867f16e22bf37f926eb1ddbdf691609764bf3f17438f6dd52ba6a46cfa52b

  • SSDEEP

    98304:krP+CRqHj3cKOMFZzv0BH8kKBjzjqjoqrEUM:qcHj3cf8ZzMBHXKVzjqBEd

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • cf5b3c72eccb441a44ca02dec794183e_JaffaCakes118
    .rar
  • 手机进销存(单机版)/BmpOperate.fnr
    .dll windows:4 windows x86 arch:x86

    55cff23a855eb2779a26abc113ecb4b5


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/CnCalendar.fne
    .dll windows:4 windows x86 arch:x86

    0140d49f2331a1d31025854a43ea1bef


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/EChartBar.fne
    .dll windows:4 windows x86 arch:x86

    0ebd8dc6b0c538fb38cc331419d818a6


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/ExtMenu.fnr
    .dll windows:4 windows x86 arch:x86

    472b95d04dba8e53958d2b826a76dce5


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/bac.edb
  • 手机进销存(单机版)/barcodex.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    78031dfeeb682f1036388b813aa0eb7a


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/dasha.ini
  • 手机进销存(单机版)/dasha2.ini
  • 手机进销存(单机版)/dasha3.ini
  • 手机进销存(单机版)/data/WLFDB.mdb
  • 手机进销存(单机版)/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/eDB.fne
    .dll windows:4 windows x86 arch:x86

    f857d1f0d4acc848a6aef5d66ff25e1a


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/eExcel2000.fne
    .dll regsvr32 windows:4 windows x86 arch:x86

    fc4c816a60b487c1a3d84dbba462b897


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/eGrid.fne
    .dll windows:4 windows x86 arch:x86

    bec4f0ff32d25245ebeff324d2dc4410


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/edit/cgrkd.grd
  • 手机进销存(单机版)/edit/daori.grd
  • 手机进销存(单机版)/edit/dhb.grd
  • 手机进销存(单机版)/edit/dxcf.grd
  • 手机进销存(单机版)/edit/fy.grd
  • 手机进销存(单机版)/edit/ghswl1.grd
  • 手机进销存(单机版)/edit/ghswl2.grd
  • 手机进销存(单机版)/edit/ghswl3.grd
  • 手机进销存(单机版)/edit/han.grd
  • 手机进销存(单机版)/edit/han2.grd
  • 手机进销存(单机版)/edit/kcc.grd
  • 手机进销存(单机版)/edit/kcpd.grd
  • 手机进销存(单机版)/edit/khwl.grd
  • 手机进销存(单机版)/edit/khwl1.grd
  • 手机进销存(单机版)/edit/khwl2.grd
  • 手机进销存(单机版)/edit/sbb.grd
  • 手机进销存(单机版)/edit/spbs.grd
  • 手机进销存(单机版)/edit/spti.grd
  • 手机进销存(单机版)/edit/sr.grd
  • 手机进销存(单机版)/edit/xj.grd
  • 手机进销存(单机版)/edit/xj1.grd
  • 手机进销存(单机版)/edit/xj2.grd
  • 手机进销存(单机版)/edit/xrkd.grd
  • 手机进销存(单机版)/edit/xrkd1.grd
  • 手机进销存(单机版)/edit/xsd.grd
  • 手机进销存(单机版)/edit/xsd2.grd
  • 手机进销存(单机版)/edit/xsd3.grd
  • 手机进销存(单机版)/edit/xsd4.grd
  • 手机进销存(单机版)/edit/xsd5.grd
  • 手机进销存(单机版)/edit/xtv.grd
  • 手机进销存(单机版)/edit/xtv2.grd
  • 手机进销存(单机版)/edit/xxsd.grd
  • 手机进销存(单机版)/edit/zz.grd
  • 手机进销存(单机版)/edit/会员资料.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/供货商.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/分类信息.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/商品信息.grd
  • 手机进销存(单机版)/edit/商品信息.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/商品库存.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/客户资料.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/批发表.grd
  • 手机进销存(单机版)/edit/批发销售单.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/报表.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/报表1.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/条码编制.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/积分.grd
  • 手机进销存(单机版)/edit/综统计报表.xls
    .xls windows office2003
  • 手机进销存(单机版)/edit/销售.xls
    .xls windows office2003
  • 手机进销存(单机版)/hlp/xcxj.chm
    .chm
  • 手机进销存(单机版)/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/readme.txt
  • 手机进销存(单机版)/shan.edb
  • 手机进销存(单机版)/shan2.edb
  • 手机进销存(单机版)/shan3.edb
  • 手机进销存(单机版)/shan4.edb
  • 手机进销存(单机版)/sjjxc.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 手机进销存(单机版)/tubian.edb
  • 手机进销存(单机版)/tupan/008.jpg
    .jpg
  • 手机进销存(单机版)/tupan/C001.gif
    .gif
  • 手机进销存(单机版)/tupan/Thumbs.db
  • 手机进销存(单机版)/xfzh.edb
  • 手机进销存(单机版)/xplib.fne
    .dll windows:4 windows x86 arch:x86

    9fef9bf9acc89e1f2c179276720200a6


    Headers

    Imports

    Exports

    Sections

  • 手机进销存(单机版)/yltx/WLFDB.wlf
  • 手机进销存(单机版)/手机短信群发安装及问题排除说明.doc
    .doc windows office2003
  • 手机进销存(单机版)/打印设置.ini
  • 手机进销存(单机版)/打印设置2.ini
  • 手机进销存(单机版)/系统设置.ini
  • 手机进销存(单机版)/颜色.ini