Overview

overview

7

Static

static

3

ASYCFILT.dll

windows7-x64

3

ASYCFILT.dll

windows10-2004-x64

3

CMDLGCHS.dll

windows7-x64

1

CMDLGCHS.dll

windows10-2004-x64

1

COMCAT.dll

windows7-x64

3

COMCAT.dll

windows10-2004-x64

3

COMDLG32.dll

windows7-x64

3

COMDLG32.dll

windows10-2004-x64

3

MSVBVM60.dll

windows7-x64

3

MSVBVM60.dll

windows10-2004-x64

3

MSWINSCK.dll

windows7-x64

3

MSWINSCK.dll

windows10-2004-x64

3

OLEAUT32.dll

windows7-x64

3

OLEAUT32.dll

windows10-2004-x64

3

OLEPRO32.dll

windows7-x64

3

OLEPRO32.dll

windows10-2004-x64

3

QQ�һ�...0).exe

windows7-x64

QQ�һ�...0).exe

windows10-2004-x64

SETUP1.exe

windows7-x64

3

SETUP1.exe

windows10-2004-x64

3

ST6UNST.exe

windows7-x64

3

ST6UNST.exe

windows10-2004-x64

3

STDOLE2.dll

windows7-x64

1

STDOLE2.dll

windows10-2004-x64

1

VB6CHS.dll

windows7-x64

1

VB6CHS.dll

windows10-2004-x64

1

VB6STKIT.dll

windows7-x64

3

VB6STKIT.dll

windows10-2004-x64

3

WINSKCHS.dll

windows7-x64

1

WINSKCHS.dll

windows10-2004-x64

1

nbsetup.exe

windows7-x64

7

nbsetup.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfb874b8c39118bef32e72f7450a818c_JaffaCakes118

  • Size

    6.3MB

  • MD5

    cfb874b8c39118bef32e72f7450a818c

  • SHA1

    f62780940bf149e6937f5f198dc15feb982577c8

  • SHA256

    c25cddd713d29b55fded90cd221beb24fc02d4a4910a8e2307724a6e57daaedd

  • SHA512

    8518959317c16df10718ff1bdad89f7368aa8a896d26ca4745c386c264f9227c1bdf73f4f70a8601ca7f19ff773e4397320ddfa0b753439db93d465af0d2d941

  • SSDEEP

    196608:NYa5IOiEOxqcH7wTZA+Yh7sRahn62UyTOC5zs8:Ca5IwMOZA+C74MOks8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • cfb874b8c39118bef32e72f7450a818c_JaffaCakes118
    .rar
  • QQ挂机王 服务器端(V5.0).CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    008ae5f04717491074dbf710ad0ba9e0


    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5d13f1b45437e48acf7175e1471cd9aa


    Headers

    Imports

    Exports

    Sections

  • MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    354f0e4993e3e3b9ed42e25935d15ead


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e2f9006fffe758009776b5b7fdcd342


    Headers

    Imports

    Exports

    Sections

  • QQ�һ��� ��������(V5.0).exe
    .exe windows:4 windows x86 arch:x86

    b4478620d775e3e122c6ad2a89e48d1d


    Headers

    Imports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • WINSKCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SETUP.LST
  • nbsetup.EXE
    .exe windows:4 windows x86 arch:x86

    e41c25ab7824b3df73334188c40518ae


    Headers

    Imports

    Exports

    Sections

  • qqgjw.exe
    .exe windows:4 windows x86 arch:x86

    6c424b31860b36863dc94d7c0c507097


    Headers

    Imports

    Exports

    Sections

  • qqgjw_server.JPG
    .jpg
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • web.box
    .vbs
  • web/Index.asp
    .vbs
  • web/images/qqgjw.js
    .js
  • web/images/qqgjw_begin.gif
  • web/images/qqgjw_l09t2.gif
    .gif
  • web/images/qqgjw_l09t2b2.gif
    .gif
  • web/images/qqgjw_l09t2b3.gif
    .gif
  • web/images/qqgjw_serch.gif
  • web/images/qqgjw_stop.gif
  • web/images/qqgjw_style.css
  • web/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot
  • 安装帮助文件.txt