Overview

overview

8

Static

static

3

360.cmd

windows7-x64

4

360.cmd

windows10-2004-x64

4

360SE.vbs

windows7-x64

3

360SE.vbs

windows10-2004-x64

7

361.cmd

windows7-x64

1

361.cmd

windows10-2004-x64

1

36OSE.vbs

windows7-x64

6

36OSE.vbs

windows10-2004-x64

7

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

Internet Expl0rer.lnk

windows7-x64

3

Internet Expl0rer.lnk

windows10-2004-x64

3

copy.cmd

windows7-x64

8

copy.cmd

windows10-2004-x64

8

cpa.cmd

windows7-x64

7

cpa.cmd

windows10-2004-x64

7

dodo.vbs

windows7-x64

1

dodo.vbs

windows10-2004-x64

1

fav.cmd

windows7-x64

4

fav.cmd

windows10-2004-x64

4

msn.exe

windows7-x64

7

msn.exe

windows10-2004-x64

7

runonce.cmd

windows7-x64

8

runonce.cmd

windows10-2004-x64

8

setup_free_ha.vbs

windows7-x64

8

setup_free_ha.vbs

windows10-2004-x64

8

software.vbs

windows7-x64

1

software.vbs

windows10-2004-x64

1

tj.cmd

windows7-x64

4

tj.cmd

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    13a05bb6d2f7afe9f0e32f252bbc93d4_JaffaCakes118

  • Size

    265KB

  • MD5

    13a05bb6d2f7afe9f0e32f252bbc93d4

  • SHA1

    ac454c5f6c27692d3a0a87fc7d151742faa98477

  • SHA256

    84eefc7179b42f72684f48c818d68352f7b1747e7953a5ed450657d99d5049f4

  • SHA512

    5cbb50ce238f21252365fd1f2f768f08e1cde3078ec3cf96268d1fa4d09aeecb45006b344a0f45b8bc338a2e1f2a1802f651c571e8ad8256fac92b604eb8b67e

  • SSDEEP

    6144:Zy2uaufWG7Jb1juH5Ek8rbyytnhPAY2z+VWpRFd9rJiPUbVxXRurlq:EkufWG7GZENfNhDi7rJSSxXRuM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13a05bb6d2f7afe9f0e32f252bbc93d4_JaffaCakes118
    .rar
  • 360.cmd
  • 360SE.vbs
    .vbs
  • 361.cmd
  • 36OSE.vbs
    .vbs
  • 36O安全浏览器 3.lnk
    .lnk
  • 36O安全浏览器 3.lnk
    .lnk
  • Internet Expl0rer.lnk
    .lnk
  • copy.cmd
  • cpa.cmd
  • dodo.vbs
    .vbs
  • fav.cmd
  • msn.exe
    .exe windows:4 windows x86 arch:x86

    ccc0e829fe1206cd39d147ca374725d4


    Headers

    Imports

    Sections

  • runonce.cmd
  • setup_free_ha.vbs
    .vbs
  • software.vbs
    .vbs
  • tao.ico
  • tj.cmd
  • tool.cmd
  • win.vbs
    .vbs
  • 淘宝购物.url
    .url
  • 网址导航.url
  • 软件下载.url