Overview

overview

7

Static

static

3

bc_gj-Visu...cn.url

windows7-x64

6

bc_gj-Visu...cn.url

windows10-2004-x64

3

bc_gj-Visu...te.exe

windows7-x64

3

bc_gj-Visu...te.exe

windows10-2004-x64

3

bc_gj-Visu....0.exe

windows7-x64

3

bc_gj-Visu....0.exe

windows10-2004-x64

3

bc_gj-Visu...lp.chm

windows7-x64

1

bc_gj-Visu...lp.chm

windows10-2004-x64

1

bc_gj-Visu...cn.url

windows7-x64

6

bc_gj-Visu...cn.url

windows10-2004-x64

3

bc_gj-Visu...��.chm

windows7-x64

1

bc_gj-Visu...��.chm

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

7

bc_gj-Visu...��.vbs

windows10-2004-x64

7

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

3

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

bc_gj-Visu...��.vbs

windows7-x64

1

bc_gj-Visu...��.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bb8113a814507876d6cc4e1db6f5612_JaffaCakes118

  • Size

    2.3MB

  • MD5

    2bb8113a814507876d6cc4e1db6f5612

  • SHA1

    8566e596fb8680b45c1100fb58c1d227e56f4162

  • SHA256

    40d4340ec27f4c01b020c6931f566b17cf29e1a8f8f72eba3a6365887b76a8dc

  • SHA512

    63020e47b6c7491214cb43924a1e9d1cc5bfea367db24449d0d0d2a196e75be0335cb6db5c56bcb5be6d740d5a09573c358a25dcb949b09e1a0bb8c6160597b5

  • SSDEEP

    49152:3y1HqsoOYhXm22hvDTDpG/NWeYzlqRZMWo1yk1rl4kZJsp+XCq+:iDoDXAL8VJ2qRa51FZZJssXCr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bb8113a814507876d6cc4e1db6f5612_JaffaCakes118
    .rar
  • bc_gj-VisualVBS_hicode/hicode/HiCode.cn.url
    .url
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/3SOFT/IcoSprite.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/3SOFT/IcoSprite.txt
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/3SOFT/dePack_1.0.exe
    .exe windows:4 windows x86 arch:x86

    820ab24e53af2dbafc74d24f87e40262


    Headers

    Imports

    Sections

  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/Dos_help.chm
    .chm
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/HiCode.cn.url
    .url
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/Microsoft Windows脚本技术.CHM
    .chm
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/VBS删除自身.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/VBS看看今天是星期几.class
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/vbscript中的循环.class
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/vbs中的错误捕获器.class
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/vbs强制关闭程序.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/vbs读英语.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/中文姓名笔画计算.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/创建文本文件.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/删除文件.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/字符统计功能模块.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/弹出YESNO的对话框.class
    .vbs
  • bc_gj-VisualVBS_hicode/hicode/VisualVBS/VBSClass/打开任务管理器.class
    .vbs