Overview

overview

3

Static

static

3

Readme-说明.htm

windows7-x64

3

Readme-说明.htm

windows10-2004-x64

1

le_05_35/CrCom.dll

windows7-x64

3

le_05_35/CrCom.dll

windows10-2004-x64

3

le_05_35/D...rt.vbs

windows7-x64

1

le_05_35/D...rt.vbs

windows10-2004-x64

1

le_05_35/D...ss.vbs

windows7-x64

1

le_05_35/D...ss.vbs

windows10-2004-x64

1

le_05_35/D...et.vbs

windows7-x64

1

le_05_35/D...et.vbs

windows10-2004-x64

1

le_05_35/D...ad.vbs

windows7-x64

1

le_05_35/D...ad.vbs

windows10-2004-x64

1

le_05_35/D...ts.vbs

windows7-x64

1

le_05_35/D...ts.vbs

windows10-2004-x64

1

le_05_35/D...rt.vbs

windows7-x64

1

le_05_35/D...rt.vbs

windows10-2004-x64

1

le_05_35/D...HO.vbs

windows7-x64

1

le_05_35/D...HO.vbs

windows10-2004-x64

1

le_05_35/IENewWin.dll

windows7-x64

3

le_05_35/IENewWin.dll

windows10-2004-x64

3

le_05_35/L...32.dll

windows7-x64

3

le_05_35/L...32.dll

windows10-2004-x64

3

le_05_35/L_E.exe

windows7-x64

3

le_05_35/L_E.exe

windows10-2004-x64

3

le_05_35/P...he.dll

windows7-x64

3

le_05_35/P...he.dll

windows10-2004-x64

3

le_05_35/P...ap.dll

windows7-x64

3

le_05_35/P...ap.dll

windows10-2004-x64

3

le_05_35/P...pt.dll

windows7-x64

3

le_05_35/P...pt.dll

windows10-2004-x64

3

le_05_35/P...ge.htm

windows7-x64

3

le_05_35/P...ge.htm

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d688483acb03c6e1e5709581c3e1143_JaffaCakes118

  • Size

    754KB

  • MD5

    0d688483acb03c6e1e5709581c3e1143

  • SHA1

    46d30b7912b2a4e57cbe2c65a83fd1bcdfc6b2b7

  • SHA256

    2ac61a1d3c9355e09360c2529b5c19060373ce4dee01fe9d7223c94118d130f2

  • SHA512

    82c8dbed7a11b38fc15a44d93e8b7187b3892855937adc3618d5b9188dad85c79f2289329a9b7c70367fb8de03950a35c71bc124f4f9db28c05624fc78f81fa3

  • SSDEEP

    12288:cMJYhOXWj4z8E+EpBdSD6ZP+xAXPhwNpR4sZd9lvtTmJX7/pzdgEuYUkF:cMJYnw8Ex3cHNpl7bTkXjFeEuYUkF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d688483acb03c6e1e5709581c3e1143_JaffaCakes118
    .rar
  • Readme-说明.htm
    .html
  • le_05_35/Config.dat
  • le_05_35/CrCom.dll
    .dll windows:4 windows x86 arch:x86

    25c3d4994c025b907a64368e955a0b7a


    Headers

    Imports

    Exports

    Sections

  • le_05_35/DownManager/DLExpert.vbs
    .vbs
  • le_05_35/DownManager/DownLoadExpress.vbs
    .vbs
  • le_05_35/DownManager/FlashGet.vbs
    .vbs
  • le_05_35/DownManager/HiDownload.vbs
    .vbs
  • le_05_35/DownManager/NetAnts.vbs
    .vbs
  • le_05_35/DownManager/NetTransport.vbs
    .vbs
  • le_05_35/DownManager/ThunderBHO.vbs
    .vbs
  • le_05_35/DownManager/list.ini
  • le_05_35/Error.Log
  • le_05_35/IENewWin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c76217d44631d669e59e9092ef6592d8


    Headers

    Imports

    Exports

    Sections

  • le_05_35/LCmnCtrl32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9eea7c59a85682eea60e154c3fdc7043


    Headers

    Imports

    Exports

    Sections

  • le_05_35/L_E.exe
    .exe windows:4 windows x86 arch:x86

    7c751caadb3b58a101de2cbf118df094


    Headers

    Imports

    Sections

  • le_05_35/Plugin/ClearCache/ClearCache.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    78baaa99937a7ea2ade41525a98fa166


    Headers

    Imports

    Exports

    Sections

  • le_05_35/Plugin/ClearCache/ClearCache.ini
  • le_05_35/Plugin/ClearCache/data.ini
  • le_05_35/Plugin/GetWebSnap/GetWebSnap.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b5eed564dead02746817a93409025ed2


    Headers

    Imports

    Exports

    Sections

  • le_05_35/Plugin/GetWebSnap/GetWebSnap.ini
  • le_05_35/Plugin/RunScript/RunScript.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d1e1b0f572011b8e47a0c449d248391a


    Headers

    Imports

    Exports

    Sections

  • le_05_35/Plugin/RunScript/RunScript.ini
  • le_05_35/Plugin/RunScript/ViewPage.htm
    .js
  • le_05_35/Plugin/RunScript/ViewPage.js
    .js
  • le_05_35/Plugin/RunScript/jc_all.vbs
    .vbs
  • le_05_35/Plugin/RunScript/jc_all_img.vbs
    .vbs
  • le_05_35/Plugin/RunScript/rscfg.ini
  • le_05_35/Plugin/RunScript/v.ico
  • le_05_35/Plugin/RunScript/复件 ViewPage.js
    .js
  • le_05_35/Plugin/RunScript/复件 复件 ViewPage.htm
    .js
  • le_05_35/Plugin/ShowSelHtml/ShowSelHtml.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a7f2c49039c609dddaf3331568f7e38e


    Headers

    Imports

    Exports

    Sections

  • le_05_35/Plugin/ShowSelHtml/ShowSelHtml.ini
  • le_05_35/Plugin/URLHistory/URLHistory.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e4acea340fad880a04a828f14250c58


    Headers

    Imports

    Exports

    Sections

  • le_05_35/Plugin/URLHistory/URLHistory.ini
  • le_05_35/Plugin/URLHistory/URLHistory.pdb
  • le_05_35/def_lexplorer.ini
  • le_05_35/lexplorer.ini
  • le_05_35/myacc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2ae57e71bbd835ae676532a25533fb3d


    Headers

    Imports

    Exports

    Sections

  • le_05_35/readme.txt
  • le_05_35/search/mul.ini
  • le_05_35/search/searchs.ini
  • le_05_35/shortcut.vbs
    .vbs
  • le_05_35/theme/crystal/gray.png
    .png
  • le_05_35/theme/crystal/normal.png
    .png
  • le_05_35/theme/crystal/skin.ini
  • le_05_35/theme/iCandy/big.gif
    .gif
  • le_05_35/theme/iCandy/big.png
    .png
  • le_05_35/theme/iCandy/combine.gif
    .gif
  • le_05_35/theme/iCandy/gray.png
    .png
  • le_05_35/theme/iCandy/menu.gif
    .gif
  • le_05_35/theme/iCandy/menu.png
    .png
  • le_05_35/theme/iCandy/normal.png
    .png
  • le_05_35/theme/iCandy/skin.ini
  • le_05_35/theme/iCandy/win_g.png
    .png
  • le_05_35/theme/iCandy/win_n.png
    .png
  • le_05_35/theme/kde/gray.png
    .png
  • le_05_35/theme/kde/normal.png
    .png
  • le_05_35/theme/kde/skin.ini
  • le_05_35/theme/vista/gray.png
    .png
  • le_05_35/theme/vista/normal.png
    .png
  • le_05_35/theme/vista/skin.ini
  • le_05_35/tips.txt