Overview

overview

7

Static

static

3

Client.exe

windows7-x64

7

Client.exe

windows10-2004-x64

7

InstallerC...or.exe

windows7-x64

7

InstallerC...or.exe

windows10-2004-x64

7

Server.exe

windows7-x64

3

Server.exe

windows10-2004-x64

3

conn.vbs

windows7-x64

1

conn.vbs

windows10-2004-x64

1

getip.vbs

windows7-x64

1

getip.vbs

windows10-2004-x64

1

ipdat.asp

windows7-x64

3

ipdat.asp

windows10-2004-x64

3

setip.vbs

windows7-x64

1

setip.vbs

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1d0f9c32220ff30121d1919f79da684_JaffaCakes118

  • Size

    11.3MB

  • MD5

    e1d0f9c32220ff30121d1919f79da684

  • SHA1

    6a65810e6c7eee83da6580cf4a7a89d5f37b7748

  • SHA256

    832d930339aab2be7449da941c88139764e691a73b2af5cda03bb7d7aa899bc4

  • SHA512

    e10c50bf4ed8c2b2d995486c5f9e7bda0e45c652e5807cbffb94d91ce51261451d637f99f631bedecf824e8daa87d94c1b72dc9347f27d0384b4055f7cf8b0c7

  • SSDEEP

    196608:u3Kk2Jp+PuYQz5HxUfFiq862CFcznOKIdhe+iwYsGiIQ0PH8+N34yvpESYfJg2z4:aKVpwQt84P+cnaOwx0PxdnkJtzye8v59

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • e1d0f9c32220ff30121d1919f79da684_JaffaCakes118
    .rar
  • Client.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections

  • InstallerConfigurator.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections

  • QQWry.Dat
  • Server.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • asp上线系统.zip
    .zip
  • conn.asp
    .vbs
  • getip.asp
    .vbs
  • ipdat.asp
  • setip.asp
    .vbs
  • readme.txt
  • 新云软件.url
    .url