Overview

overview

7

Static

static

3

ha-exptize...up.exe

windows7-x64

7

ha-exptize...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$TEMP/fzhexp/1.exe

windows7-x64

7

$TEMP/fzhexp/1.exe

windows10-2004-x64

7

$WINDIR/eS...50.dll

windows7-x64

3

$WINDIR/eS...50.dll

windows10-2004-x64

3

$WINDIR/eS...ne.dll

windows7-x64

3

$WINDIR/eS...ne.dll

windows10-2004-x64

3

exptizer.chm

windows7-x64

1

exptizer.chm

windows10-2004-x64

1

exptizer.exe

windows7-x64

3

exptizer.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

.rtf

windows7-x64

4

.rtf

windows10-2004-x64

1

ha-exptize...om.htm

windows7-x64

3

ha-exptize...om.htm

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9981880662bb99bd4b24a6fed644367_JaffaCakes118

  • Size

    908KB

  • MD5

    f9981880662bb99bd4b24a6fed644367

  • SHA1

    91ed6960b8fd600d43481e7991c793e1725655d6

  • SHA256

    8e15abfc4d604b90258587d7032516c5c57b7df90a8982486b5025cb7fccbb42

  • SHA512

    6b53b89c74550226592f343525929b19a204a5aecf0516fdb4457521888c26cb14b111ebadcce44fd276b7ee2d127c2692be4de942d670b98d84b4b0daabfb73

  • SSDEEP

    24576:ObzVpEClJ2DGKnAhvdEiCN6tS+jvxGVg24Rt8ow3xCG0:OXfECDiAdEdN9OAEeoyxc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • f9981880662bb99bd4b24a6fed644367_JaffaCakes118
    .zip
  • ha-exptizerpro-fzh/Setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/fzhexp/1.exe
    .exe windows:5 windows x86 arch:x86

    c56a25fa4336eeb10723b3537ba4876d


    Headers

    Imports

    Sections

  • $WINDIR/eSellerateControl350.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    87b275451940fe86c3b1f10a8bfe6850


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/eSellerateEngine.dll
    .dll windows:4 windows x86 arch:x86

    844e3ce531035c1816fe862b01cc8851


    Headers

    Imports

    Exports

    Sections

  • README.txt
  • exptizer.chm
    .chm
  • exptizer.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • license.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ˵.txt
  • .url
  • .rtf
    .rtf
  • ha-exptizerpro-fzh/kaishile.com.htm
    .html
  • ha-exptizerpro-fzh/˵.txt