Overview

overview

7

Static

static

3

tjm-v8.01/...01.exe

windows7-x64

7

tjm-v8.01/...01.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

tjm-v8.01/...01.exe

windows7-x64

7

tjm-v8.01/...01.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

太极码8...��.rtf

windows7-x64

4

太极码8...��.rtf

windows10-2004-x64

1

TJMXY8.exe

windows7-x64

TJMXY8.exe

windows10-2004-x64

tjm-v8.01/...��.url

windows7-x64

1

tjm-v8.01/...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3161fbb3da1275023d29309c993af1e_JaffaCakes118

  • Size

    1.0MB

  • MD5

    d3161fbb3da1275023d29309c993af1e

  • SHA1

    23eabc25f0c95314c83fa9bf67477d1ed2f34d24

  • SHA256

    0400a54c02e3ca21fffb2524b0ebe81c46395fa48d01d62366e0d515e9bbdc87

  • SHA512

    ea38089724307215d5aa0acabb89404c0b7c86488ee49a3e84d8af3d12c4b1f70ba583480f8657c7406ac01bfdf0fcefb3581ebc9433ea5af1db3207ddfeba1d

  • SSDEEP

    24576:wu/PXVNMp9UH2bzTJlfOiLBHQF2tMVMYPEEj/jnlUH+URV7:1v/MzUSVOqQIuVMYPL7BUH1RJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d3161fbb3da1275023d29309c993af1e_JaffaCakes118
    .rar
  • tjm-v8.01/TjmGB8.01.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • tjm-v8.01/TjmGBK8.01.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • tjm-v8.01/别急，先看看我.txt
  • tjm-v8.01/太极码8.01版使用手册.rar
    .rar
  • 太极码8.01版使用手册.rtf
    .rtf
  • tjm-v8.01/太极码学园8.0.0.rar
    .rar
  • CGA.BGI
  • EGAVGA.BGI
  • HELP.HLP
  • HERC.BGI
  • LFB.TMP
  • STJ.DAT
  • TESTTEXT.TXT
  • TJMXY8.EXE
  • USER.TST
  • X-RESTA.DAT
  • 请读我.txt
  • tjm-v8.01/新云软件.url
    .url