Overview

overview

8

Static

static

3

ConNet.exe

windows7-x64

6

ConNet.exe

windows10-2004-x64

6

CutConnect...et.dll

windows7-x64

8

CutConnect...et.dll

windows10-2004-x64

8

DISK16.dll

windows7-x64

1

DISK16.dll

windows10-2004-x64

1

Disk32.dll

windows7-x64

3

Disk32.dll

windows10-2004-x64

3

LapTopSwitchSrv.dll

windows7-x64

8

LapTopSwitchSrv.dll

windows10-2004-x64

8

SetUp.exe

windows7-x64

3

SetUp.exe

windows10-2004-x64

3

StartServer.exe

windows7-x64

3

StartServer.exe

windows10-2004-x64

3

WinIo.dll

windows7-x64

3

WinIo.dll

windows10-2004-x64

3

WinIo.sys

windows7-x64

1

WinIo.sys

windows10-2004-x64

1

ZFCard.exe

windows7-x64

3

ZFCard.exe

windows10-2004-x64

3

ZFDEL.exe

windows7-x64

1

ZFDEL.exe

windows10-2004-x64

3

unload.exe

windows7-x64

3

unload.exe

windows10-2004-x64

3

zfsoft.exe

windows7-x64

3

zfsoft.exe

windows10-2004-x64

3

ʹ˵...��.doc

windows7-x64

4

ʹ˵...��.doc

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d12fa4c0d0ebb92ad2e1151e995f24bf_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d12fa4c0d0ebb92ad2e1151e995f24bf

  • SHA1

    52bf9307ac43091675f9688bb6d578d5d88d0477

  • SHA256

    6240e6ff078aacb916534f69417efd89940829bc2fc5ce55d34fb2df4492da0c

  • SHA512

    626d7bee0c07ea348203b608d4edba202a2aea0bebb808da76452e7940e334c5a57f7415204eb4a91e891233323b96f88f93bb95720b9b6d84479c2d0f52123e

  • SSDEEP

    24576:9npfUkOwKrPAx3d0nKexVbMRMm/IwbEcYSrlvc87TefK4gp6BGgr:9nlOwmYNWVkLEcZFTmg6Bvr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • d12fa4c0d0ebb92ad2e1151e995f24bf_JaffaCakes118
    .zip
  • ConNet.exe
    .exe windows:4 windows x86 arch:x86

    2a6dd7f959ece816ce047fd57559aa50


    Headers

    Imports

    Sections

  • CutConnectInterNet.dll
    .dll windows:4 windows x86 arch:x86

    f1f7c3497329ebafd4a948f432e7531f


    Headers

    Imports

    Exports

    Sections

  • DISK16.DLL
  • Disk32.dll
    .dll windows:4 windows x86 arch:x86

    a0e4f543c8a56bc720eb38d4ccdb60a6


    Headers

    Imports

    Exports

    Sections

  • LapTopSwitchSrv.dll
    .dll windows:4 windows x86 arch:x86

    f039c0fc20143ca0d5515131bcbcd4e6


    Headers

    Imports

    Exports

    Sections

  • SetUp.dll
    .exe windows:4 windows x86 arch:x86

    2b60a63d3dafb044a88da007209a1da9


    Headers

    Imports

    Sections

  • SorftType.txt
  • StartServer.exe
    .exe windows:4 windows x86 arch:x86

    f5d3271e402583d98fc7a27fc0917833


    Headers

    Imports

    Sections

  • WINIO.VXD
  • WinIo.dll
    .dll windows:4 windows x86 arch:x86

    b9b2bee901bb36181f387e1e336faa1f


    Headers

    Imports

    Exports

    Sections

  • WinIo.sys
    .sys windows:4 windows x86 arch:x86

    172b54da983eaa27abf08d8ed525b840


    Headers

    Imports

    Sections

  • ZFCard.exe
    .exe windows:4 windows x86 arch:x86

    4db11c510893d743dd6a8eec68c2cb3b


    Headers

    Imports

    Sections

  • ZFDEL.EXE
    .exe windows:4 windows x86 arch:x86

    6c1a522dd6adb1f2bf1759e0a0ba6dc6


    Headers

    Imports

    Sections

  • unload.exe
    .exe windows:4 windows x86 arch:x86

    3af19230ad093b3439669fb0f00a46e5


    Headers

    Imports

    Sections

  • zfsoft.exe
    .exe windows:4 windows x86 arch:x86

    6e427e3593eeda6875af5a218878740a


    Headers

    Imports

    Sections

  • ʹ˵.doc
    .doc windows office2003