Overview

overview

7

Static

static

7

cartrade/CarTrade.chm

windows7-x64

1

cartrade/CarTrade.chm

windows10-2004-x64

1

cartrade/CarTrade.exe

windows7-x64

3

cartrade/CarTrade.exe

windows10-2004-x64

3

cartrade/PubFunc.dll

windows7-x64

3

cartrade/PubFunc.dll

windows10-2004-x64

3

cartrade/S...te.exe

windows7-x64

3

cartrade/S...te.exe

windows10-2004-x64

3

cartrade/borlndmm.dll

windows7-x64

3

cartrade/borlndmm.dll

windows10-2004-x64

3

cartrade/rmuser.chm

windows7-x64

1

cartrade/rmuser.chm

windows10-2004-x64

1

cartrade/�...��.htm

windows7-x64

3

cartrade/�...��.htm

windows10-2004-x64

3

cartrade/�...��.url

windows7-x64

1

cartrade/�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ac9efb0e21331c4981fa3daabd96ba2_JaffaCakes118

  • Size

    1.6MB

  • MD5

    3ac9efb0e21331c4981fa3daabd96ba2

  • SHA1

    14dd20529b6c450ec115c0a5f6c18bbb4ef60aa8

  • SHA256

    efb11a3610434d224daca512614c31ba02ec46b765cb82d3b94b6e362280d908

  • SHA512

    070ae307a33d903094dd37dc7c2f3c7637d88edd580e052766015e11664d1c70d9981d3ffc9bb7512990391bda0f46595f549e47100d4ec5f0663b5f15d71036

  • SSDEEP

    49152:djZkEYDkuOLU/f8tO1WIu7NgnrskwmRIlxA:1ZkEazOLU/EtuWIu6nwkrIlC

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ac9efb0e21331c4981fa3daabd96ba2_JaffaCakes118
    .rar
  • cartrade/CHIS.INI
  • cartrade/CarTrade.chm
    .chm
  • cartrade/CarTrade.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cartrade/Data/CarTrade.mdb
  • cartrade/PubFunc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cartrade/SoftUpdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cartrade/Update.ini
  • cartrade/borlndmm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cartrade/rmuser.chm
    .chm
  • cartrade/原始的销售发票打印样式.rmf
  • cartrade/当前使用的销售发票打印样式.rmf
  • cartrade/必看说明.htm
  • cartrade/成交证明单.rmf
  • cartrade/河源下载站.url
    .url
  • cartrade/网上升级的销售发票打印样式.rmf