General

  • Target

    d21f723a6b21f0df6c1370b9ab36f59f_JaffaCakes118

  • Size

    2.1MB

  • MD5

    d21f723a6b21f0df6c1370b9ab36f59f

  • SHA1

    67be827682de5d40bf685a3938bb5e1d7732294a

  • SHA256

    01c07624dd9cb126d1f8f0c260eb4f538520728276bf121c84641d101527252a

  • SHA512

    8f67c0b9b9df0cc72d7abeb3f3fe708f5ae7e55882907825feecdf229ba5861b43a35a13a7b10a3670ac78833e117ba42ca52c4fb62a874051d09558b034e6e3

  • SSDEEP

    49152:C6HfTRkhSgQCzFxwltnpWCeqUYeiaA2GUElQ1U9f9PMkvVzRs:CcTRPvCGtnteji5K9u9ikvVzG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • d21f723a6b21f0df6c1370b9ab36f59f_JaffaCakes118
    .rar
  • CTerm/CJ60Lib.dll
    .dll windows:4 windows x86 arch:x86

    2f109a9dd1b7b6167dc21d09869667cb


    Headers

    Imports

    Exports

    Sections

  • CTerm/CONTACT.WAV
  • CTerm/CTerm.ckt
  • CTerm/CTerm.exe
    .exe windows:4 windows x86 arch:x86

    15e0e3dabbb82b62d0e928f1ffc11c9a


    Headers

    Imports

    Exports

    Sections

  • CTerm/DLLs/_sre.pyd
    .dll windows:4 windows x86 arch:x86

    778a3bade5e5fcc6159b7eccbe52a8a3


    Headers

    Imports

    Exports

    Sections

  • CTerm/DLLs/datetime.pyd
    .dll windows:4 windows x86 arch:x86

    8845cadfa224f993ddc488f23a773880


    Headers

    Imports

    Exports

    Sections

  • CTerm/QQWry.Dat
  • CTerm/ShortCut.vbs
    .vbs
  • CTerm/codech.frc
  • CTerm/codech.lst
  • CTerm/copyconfig.py
    .py .sh linux
  • CTerm/filelist.txt
  • CTerm/python23.dll
    .dll windows:4 windows x86 arch:x86

    f4232277a279f7ccf0de74aaaf430cdb


    Headers

    Imports

    Exports

    Sections

  • CTerm/python23.zip
    .zip
  • StringIO.pyc
  • UserDict.pyc
  • atexit.pyc
  • copy.pyc
  • copy_reg.pyc
  • fnmatch.pyc
  • glob.pyc
  • globals.py
  • imputil.pyc
  • linecache.pyc
  • ntpath.pyc
  • os.pyc
  • os2emxpath.pyc
  • popen2.pyc
  • posixpath.pyc
  • prettyseq.py
  • random.pyc
  • re.pyc
  • repr.pyc
  • sre.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • stat.pyc
  • string.pyc
  • threading.pyc
  • traceback.pyc
  • types.pyc
  • warnings.pyc
  • zipfile.pyc
  • CTerm/readme.txt
  • CTerm/script/CopyArticle.py
    .py .sh linux
  • CTerm/script/continuous.py
  • CTerm/script/continuous_1.py
    .py .sh linux
  • CTerm/script/continuous_folder.py
  • CTerm/script/continuous_i.py
  • CTerm/script/ct_system.py
    .py .sh linux
  • CTerm/script/cterm_command.py
    .py .sh linux
  • CTerm/script/download.py
    .py .sh linux
  • CTerm/script/downloadansi.py
    .py .sh linux
  • CTerm/script/downloadhtml.py
    .py .sh linux
  • CTerm/script/jc_link.vbs
    .vbs
  • CTerm/script/readme-Python脚本支持.txt
  • CTerm/script/readme-状态识别定制.txt
  • CTerm/script/sametitle.py
    .py .sh linux
  • CTerm/script/sendmsg.py
  • CTerm/script/sitestatus.py
    .py .sh linux
  • CTerm/script/test.py
    .py .sh linux
  • CTerm/script/tools.py
    .py .sh linux
  • CTerm/script/upload.py
  • CTerm/script/useripparse.py
    .py .sh linux
  • CTerm/script/viewpic.vbs
    .vbs
  • CTerm/start.htm
    .html
  • CTerm/tips.txt
  • CTerm/user/Address.bok
  • CTerm/user/CTerm2.ini
  • CTerm/whatsnew.txt
  • CTerm/下载说明.htm
    .html .js polyglot
  • CTerm/使用技巧.txt