General

  • Target

    d374d346899903ffc1743025d81f55d6_JaffaCakes118

  • Size

    57KB

  • MD5

    d374d346899903ffc1743025d81f55d6

  • SHA1

    2e9899f2a5692e82ea31f88d60d5b989325eaa5b

  • SHA256

    f1f1f1a29c8b31e4a4af23fdffd9d2ac5b63ea11bd09c28b92dd079ac928d91f

  • SHA512

    7251ee813d175ed32c45b16564607aabdcacade29421ad6fb188c9436cca98453f168ead023d3911b8a9bff091d631b00c8b4fbd3c09091499c43d8ebeaebe0c

  • SSDEEP

    1536:mAB3/Z3nSEHcboalmVW1WZOFO/PZLi3pCGj7Oi1YEIq/CO6tIgbW/1JR:ZhZcboalm9Z+pFCi1YEIIf6tl0R

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d374d346899903ffc1743025d81f55d6_JaffaCakes118
    .rar
  • 40229175/CurtButton.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 40229175/CurtButton.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c26fcd467874957d85e5a778999057e8


    Headers

    Imports

    Exports

    Sections

  • 40229175/FrmSplash.frm
  • 40229175/FrmSplash.frx
  • 40229175/GZZH.VBW
  • 40229175/Gzzh.vbp
  • 40229175/MSSCCPRJ.SCC
  • 40229175/frmMain.frm
    .vbs
  • 40229175/frmMain.frx
  • 40229175/modExport.bas
  • 40229175/modMain.bas
    .vbs
  • 40229175/下载说明.htm
    .html .js polyglot
  • 40229175/凭证生成辅助工具.exe
    .exe windows:4 windows x86 arch:x86

    6a4e2b954a7bcba81c0022252da500f4


    Headers

    Imports

    Sections