Overview

overview

10

Static

static

3

BackUp/200...��.bat

windows7-x64

1

BackUp/200...��.bat

windows10-2004-x64

1

BackUp/ARP...��.bat

windows7-x64

6

BackUp/ARP...��.bat

windows10-2004-x64

6

BackUp/C�...��.cmd

windows7-x64

1

BackUp/C�...��.cmd

windows10-2004-x64

1

BackUp/WIN...��.bat

windows7-x64

1

BackUp/WIN...��.bat

windows10-2004-x64

1

BackUp/XP�...��.bat

windows7-x64

7

BackUp/XP�...��.bat

windows10-2004-x64

7

BackUp/dir.bat

windows7-x64

1

BackUp/dir.bat

windows10-2004-x64

1

BackUp/dos...��.bat

windows7-x64

1

BackUp/dos...��.bat

windows10-2004-x64

1

BackUp/guest.bat

windows7-x64

1

BackUp/guest.bat

windows10-2004-x64

1

BackUp/win...��.bat

windows7-x64

BackUp/win...��.bat

windows10-2004-x64

BackUp/win...��.bat

windows7-x64

1

BackUp/win...��.bat

windows10-2004-x64

1

BackUp/xp�...��.bat

windows7-x64

1

BackUp/xp�...��.bat

windows10-2004-x64

1

BackUp/不...��.bat

windows7-x64

10

BackUp/不...��.bat

windows10-2004-x64

10

BackUp/不...��.bat

windows7-x64

10

BackUp/不...��.bat

windows10-2004-x64

10

BackUp/中...��.bat

windows7-x64

3

BackUp/中...��.bat

windows10-2004-x64

3

BackUp/使...��.bat

windows7-x64

3

BackUp/使...��.bat

windows10-2004-x64

3

BackUp/全...ni.bat

windows7-x64

1

BackUp/全...ni.bat

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    dee28327c389f214cc1f9441397ebf9c_JaffaCakes118

  • Size

    872KB

  • MD5

    dee28327c389f214cc1f9441397ebf9c

  • SHA1

    47df7e5b3f70c973908aa3c6f3852d764269f7ff

  • SHA256

    b31433eccf7a6d4a0d4f631b9cfe90cb5cae15cfd91e5822ac7bd2367d68021d

  • SHA512

    4cc33e0a1db08db6c03a76eff9dc94f332a1f65f661b7617f2b536891c09a0c7eeb52d26ddfbddeb6ae2421e8702b7c5290c7c39e4186de8ea6c0f275234afd0

  • SSDEEP

    24576:aAAAyh+Yz8xOwjrtsG3+2v35wEt0T9shD1N56iZE:aNAyhpUJjrtscePT9saiZE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dee28327c389f214cc1f9441397ebf9c_JaffaCakes118
    .rar
  • BackUp/2000XP停止打印.bat
  • BackUp/ARP本机绑定.bat
  • BackUp/C盘转换为NTFS格式.cmd
  • BackUp/WIN2003 IIS最小权限分配.bat
  • BackUp/XP服务优化批处理.bat
  • BackUp/dir.bat
  • BackUp/dos下重启.bat
  • BackUp/guest.bat
  • BackUp/win2000关机命令.bat
  • BackUp/winxp修改计算机名.bat
  • BackUp/xp下确定最后的盘符.bat
  • BackUp/不显示扩展名.bat
  • BackUp/不显示隐藏文件.bat
  • BackUp/中文显示ping结果.bat
    .bat .vbs
  • BackUp/使用WMI别名获取CPU信息.bat
  • BackUp/全盘删除所有文件夹下的_desktop.ini.bat
    .bat .vbs
  • BackUp/关闭IDE通道检测.bat
  • BackUp/列举进程.bat
  • BackUp/删除大小和类型一样的文件.bat
  • BackUp/删除所有分区的默认共享.bat
  • BackUp/判断光驱是否可用.bat
  • BackUp/判断光驱里有无光盘.bat
  • BackUp/判断分区格式.bat
    .bat .vbs
  • BackUp/刷新策略.bat
  • BackUp/取得硬盘数.bat
  • BackUp/右键添加bat.bat
  • BackUp/右键添加打开MS-DOS.bat
  • BackUp/将cwindows.复制到当前目录并显示进度.bat
    .bat .vbs
  • BackUp/弹出光驱.bat
  • BackUp/打开快捷方式指向的目录.bat
  • BackUp/批处理读注册表的Run下面的值.bat
  • BackUp/按扩展名分类.bat
  • BackUp/改变我的文档路径.bat
  • BackUp/断开网络联结.bat
  • BackUp/新云软件.url
    .url
  • BackUp/显示c盘～z盘.bat
  • BackUp/显示扩展名.bat
  • BackUp/显示用户名.bat
  • BackUp/显示网络配置.bat
  • BackUp/显示自己的IP.bat
  • BackUp/显示隐藏文件.bat
  • BackUp/更改电源管理方式.bat
    .bat .vbs
  • BackUp/更改盘符.bat
    .bat .vbs
  • BackUp/更改系统启动菜单的时间.bat
  • BackUp/枚举当前目录及子目录大小.bat
  • BackUp/枚举显示.bat
  • BackUp/查找最新的文件.bat
    .bat .vbs
  • BackUp/查看工作组.bat
  • BackUp/查看物理内存.bat
  • BackUp/查看用户是否存在.bat
  • BackUp/查看电脑硬件信息.bat
  • BackUp/查看网关的MAC地址.bat
  • BackUp/查看进程使用的端口.bat
  • BackUp/查看驱动器.bat
    .bat .vbs
  • BackUp/检查网络信息.bat
  • BackUp/每个目录占用的空间.bat
  • BackUp/百度关键字搜索.bat
  • BackUp/禁止保留文档记录.bat
  • BackUp/绑定网关的批处理及预留维护提到.bat
  • BackUp/结束进程.bat
  • BackUp/给每个盘添加卷标.cmd
  • BackUp/自动改回主页.bat
  • BackUp/自定义配置网络ip、网关、dns.bat
  • BackUp/被锁定帐户.bat
  • BackUp/解锁注册表.BAT
  • BackUp/输出倒文.bat
    .bat .vbs
  • BackUp/重命名administrator账号.bat
  • BackUp/锁注册表.BAT
  • Bin/InPageSafe.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TableHelper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • conf/RunHelp.txt
  • conf/serverRun.txt