Overview

overview

3

Static

static

3

Csrsrv.OCX.exe

windows7-x64

3

Csrsrv.OCX.exe

windows10-2004-x64

3

SkinH.dll

windows7-x64

3

SkinH.dll

windows10-2004-x64

3

TOMCTML32.OCX.exe

windows7-x64

3

TOMCTML32.OCX.exe

windows10-2004-x64

3

Ƭˢ...��.exe

windows7-x64

3

Ƭˢ...��.exe

windows10-2004-x64

3

�...԰.url

windows7-x64

1

�...԰.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    42e5d8f1bd2dde88d2b82dd450841065_JaffaCakes118

  • Size

    452KB

  • MD5

    42e5d8f1bd2dde88d2b82dd450841065

  • SHA1

    efae8ac7d84e412da28542616e405e0af247ff95

  • SHA256

    2693f340c560793c0163386ca0714a580ae8a750356031247bc2b0d6094da8ad

  • SHA512

    917fd20560aaabb5f78fd149a9384207703333195a770c4d5aa30cb9406cafe16d1dba90309533932a65d8ec20ab88b5903c674ef4c28a6027348a96b9f9ee32

  • SSDEEP

    6144:7kUDoOqvQrYoXR1LyHl5fVAkLYaL9o+PWImdMy12VIeZhX9FP3g7OWznrvQNdf5Y:w2oOqu9TwhAksayeWBLNINFfgX3if5sD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 42e5d8f1bd2dde88d2b82dd450841065_JaffaCakes118
    .zip
  • BaiSeJianYue.she
  • Csrsrv.OCX.EXE
    .exe windows:4 windows x86 arch:x86

    35fb401f4099c6267d52a8b5044e3796


    Headers

    Imports

    Sections

  • SkinH.bas
  • SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TOMCTML32.OCX.exe
    .exe windows:4 windows x86 arch:x86

    8856fe3c634e4408a41def22a045e34c


    Headers

    Imports

    Sections

  • Update.ini
  • config.ini
  • name.ini
  • time.ini
  • Ƭˢ޾.exe
    .exe windows:4 windows x86 arch:x86

    35684e90f9d317def018b3caadaee242


    Headers

    Imports

    Sections

  • ԰.txt
  • ԰.url
    .url