General

  • Target

    2a26c40da5eb3250fdc1f7613b033176_JaffaCakes118

  • Size

    8.2MB

  • MD5

    2a26c40da5eb3250fdc1f7613b033176

  • SHA1

    1d48d5a1bb44063e2f649c2e60097b77257ecc51

  • SHA256

    86ccfd5c2d5cf828fd8bfc63c5a6fb191a180563ac69b93da9425c20bf87e19d

  • SHA512

    c8a82d47d8d0e7db5f43c1a27d866199ff24dc5c2c39d38825e8caeba6480c071552936f865fa99ee160686ec747118511d99834d3d81976cc884a95f1a86690

  • SSDEEP

    196608:XBemJzXTOq/AiRxO/NJbiIjk5h3pdvzCs75ucNJ7exwi:XBemJzXh/AiRxAJiucxnvzC45uAiwi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a26c40da5eb3250fdc1f7613b033176_JaffaCakes118
    .rar
  • 下载说明.htm
    .html
  • 教师考核计算系统2.0/SETUP1.CAB
    .cab
  • ACMSETUP.EXE
    .exe windows:1 windows x86 arch:x86

    d057661fa0c57da4e10eca58cdf1dc72


    Headers

    Imports

    Sections

  • ACMSETUP.HLP
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • CALC.EXE
    .exe windows:4 windows x86 arch:x86

    500ff1538958cc73738bf0c262a1773f


    Headers

    Imports

    Sections

  • CALC.ICO
  • CLASSN~1.DBF
  • COMCAT.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CONFIG.FPW
  • FILELIST.DBF
  • FOXHHELP.EXE
    .exe windows:4 windows x86 arch:x86

    f3b41576a6979ef1dbcb2ca79384ac19


    Headers

    Imports

    Sections

  • FOXHHE~1.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    2feb96aed7c08ac62ffbb4f88a439a9c


    Headers

    Imports

    Exports

    Sections

  • FOXLIB2.DLL
    .dll windows:4 windows x86 arch:x86

    28dde0b4e2c1821b8b7f4e0406fca3d1


    Headers

    Imports

    Exports

    Sections

  • FOXUSER.DBF
  • FOXUSER.FPT
  • FR.JPG
    .jpg
  • GRADEA~1.CDX
  • GRADEA~1.DBF
  • GRADEC~1.CDX
  • GRADEC~1.DBF
  • GRADEN~1.DBF
  • GRADES~1.CDX
  • GRADES~1.DBF
  • HELP.ICO
  • HH.EXE
    .exe windows:4 windows x86 arch:x86

    8234ffa1c6f923cf35524f4e06333a2a


    Headers

    Imports

    Sections

  • HHCTRL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e5f7ad409b9cdea37e6afb7208012a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HHUPD.EXE
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Code Sign

    Headers

    Imports

    Sections

  • HSETUP.EXE
    .exe windows:4 windows x86 arch:x86

    208bd77ce42c2f2815c3279bdb7a44d9


    Headers

    Imports

    Sections

  • ITEMCAL.CDX
  • ITEMCAL.DBF
  • ITIRCL.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    9b91e45e0621ba5d4a5f87b749fc3ee9


    Headers

    Imports

    Exports

    Sections

  • ITSS.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    c056cdb62d4c3939adb4f92165de90c7


    Headers

    Imports

    Exports

    Sections

  • KHDOC.DBF
  • KHITEM.CDX
  • KHITEM.DBF
  • KHLEVEL.CDX
  • KHLEVEL.DBF
  • KHSELECT.DBF
  • KHST-H~1.CHM
    .chm
  • LEVELCHK.DBF
  • LEVELN~1.DBF
  • MCI32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    13fa0cf96dc804ea3f3d2f71b1bcf4aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSSETUP.DLL
    .dll windows:1 windows x86 arch:x86

    9f91a6d65da7fff6bdb420d66d40fac0


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    f325e1ae915b98bc4702bb3efa8aea4a


    Headers

    Imports

    Exports

    Sections

  • MSVCRT40.DLL
    .dll windows:4 windows x86 arch:x86

    57259dcda30c27e977785c33a8441434


    Headers

    Imports

    Exports

    Sections

  • MULTICAL.DBF
  • N014.JPG
    .jpg
  • NORMAL~1.MEM
  • NOTEPAD.EXE
    .exe windows:4 windows x86 arch:x86

    4e0988a29e00758ffcdd27532945ab1a


    Headers

    Imports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    20de0b13751dfdb7f5be44c0f947b93a


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • OOFL.ICO
  • PERSONAL.CDX
  • PERSONAL.DBF
  • QMKH.DBC
  • QMKH.DCT
    .js
  • QMKH.DCX
  • QUESTION.ICO
  • RANKS.CDX
  • RANKS.DBF
  • RDY1.JPG
    .jpg
  • RDY1OLD.JPG
    .jpg
  • RULERS.ICO
  • SETUP2.LST
  • SOUND1.MID
  • SOUND111.MID
  • SOUND2.MID
  • SOUND211.MID
  • SOUND3.MID
  • SOUND311.MID
  • SOUND4.MID
  • SOUND5.MID
  • SOUND6.MID
  • SOUND7.MID
  • SOUND8.MID
  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SUBJEC~1.DBF
  • TABSEG~1.CDX
  • TABSEG~1.DBF
  • TEACHER.CDX
  • TEACHER.DBF
  • TEACHE~1.CDX
  • TEACHE~1.DBF
  • USETAB.DBF
  • VFP6R.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5980ed470e407cb5f29a5787bb80355


    Headers

    Imports

    Exports

    Sections

  • VFP6RENU.DLL
    .dll windows:4 windows x86 arch:x86

    105a34c3b3ecaf6803be201e74c83cf4


    Headers

    Imports

    Exports

    Sections

  • VFP6RUN.EXE
    .exe windows:4 windows x86 arch:x86

    21b0be9e9c79dd1b598e3cb319374dd2


    Headers

    Imports

    Sections

  • WIZSET32.DLL
    .dll windows:4 windows x86 arch:x86

    a6ddee4715543289a7e54b780402c0c5


    Headers

    Imports

    Exports

    Sections

  • calc.ico
  • help.ico
  • ����1.DBF
  • ��ʦ��~1.EXE
    .exe windows:4 windows x86 arch:x86

    208bd77ce42c2f2815c3279bdb7a44d9


    Headers

    Imports

    Sections

  • 教师考核计算系统2.0/SETUP2.CAB
    .cab
  • 教师考核计算系统2.0/odbckey.inf
  • 教师考核计算系统2.0/odbcstf.dll
    .dll windows:4 windows x86 arch:x86

    33fa7ded9bb1e257c02160cf3f709998


    Headers

    Imports

    Exports

    Sections

  • 教师考核计算系统2.0/setup.exe
  • 教师考核计算系统2.0/setup.inf
  • 教师考核计算系统2.0/setup.ini
  • 教师考核计算系统2.0/setup.lst
  • 教师考核计算系统2.0/setup.stf
  • 教师考核计算系统2.0/setup.tdf