General

  • Target

    fccf3015ec0b8a8abb2c354096a65944_JaffaCakes118

  • Size

    11.4MB

  • MD5

    fccf3015ec0b8a8abb2c354096a65944

  • SHA1

    72dfaab2fbaa1f521c7be3f1d501b0f439e03f34

  • SHA256

    103ff2d94016f09ac46e189336e85453d7e565bd2614f0b7fd80adfb1b28914e

  • SHA512

    ba40529414f1d42946376b83c10a13227438256d6df64e090bc783cfccc7c32d7b19b221f14efbe2b58acf2bceb83ca148748eb83a1bb4283513d7faef922852

  • SSDEEP

    196608:PZ2peol6HA3pNo3i9RSYVskHgHi3txHdDQ9yV7aS1+G8LlXaZabkSyluGNMhDFf:PZaPcVCSYxHgHG9U9y5J1WXaZ2kDluzP

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fccf3015ec0b8a8abb2c354096a65944_JaffaCakes118
    .rar
  • PDF转CAD软件合集/PDF 2 DXF/GrafikRW2.dll
    .dll windows:4 windows x86 arch:x86

    11c00afdcb7de6fef05bb6f1e464ccfe


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/PDF2DXF.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/TRANSLATE.DBF
  • PDF转CAD软件合集/PDF 2 DXF/cadkasdeinst01e.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/faxdecode.dll
    .dll windows:4 windows x86 arch:x86

    a8ab98cd9fbf95fd1140607a2f210cb0


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/file_id.diz
  • PDF转CAD软件合集/PDF 2 DXF/freetype.dll
    .dll windows:1 windows x86 arch:x86

    42a5937d8a922cac8614287a2ccde951


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/install.log
  • PDF转CAD软件合集/PDF 2 DXF/manual.txt
  • PDF转CAD软件合集/PDF 2 DXF/options.dat
  • PDF转CAD软件合集/PDF 2 DXF/pdf2dxf.exe.manifest
    .xml
  • PDF转CAD软件合集/PDF 2 DXF/pdfrw_.dll
    .dll windows:4 windows x86 arch:x86

    f11ed116c058fa4c60e01361eb840b89


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/read me.txt
  • PDF转CAD软件合集/PDF 2 DXF/setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • PDF转CAD软件合集/PDF 2 DXF/twainio2.dll
    .dll windows:4 windows x86 arch:x86

    6b5f0ab1826e0960019f72e4c71ce9eb


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF FLY/DeIsL1.isu
  • PDF转CAD软件合集/PDF FLY/PDFFLY.HLP
  • PDF转CAD软件合集/PDF FLY/VGFLOW.DLL
    .dll windows:4 windows x86 arch:x86

    e33f080846b5521d09b4d6d7fa9624bd


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF FLY/WMFview.exe
    .exe windows:4 windows x86 arch:x86

    0c3b705c3ed42e3663ab4f28e1b21571


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/PDF FLY/_DEISREG.ISR
  • PDF转CAD软件合集/PDF FLY/_ISREG32.DLL
    .dll windows:4 windows x86 arch:x86

    0465649eec381227932d6e669f08625e


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/PDF FLY/fonts/AvantGarBoo.ps
  • PDF转CAD软件合集/PDF FLY/fonts/AvantGarBooObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/AvantGarDem.ps
  • PDF转CAD软件合集/PDF FLY/fonts/AvantGarDemObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/BookmDemi.ps
  • PDF转CAD软件合集/PDF FLY/fonts/BookmDemiIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/BookmLight.ps
  • PDF转CAD软件合集/PDF FLY/fonts/BookmLightIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/CouriBold.ps
  • PDF转CAD软件合集/PDF FLY/fonts/CouriBoldObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/CouriObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/Courier.ps
  • PDF转CAD软件合集/PDF FLY/fonts/FontMap
  • PDF转CAD软件合集/PDF FLY/fonts/Fonts.ini
  • PDF转CAD软件合集/PDF FLY/fonts/Helve.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveBold.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveBoldObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveNar.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveNarBol.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveNarBolObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveNarObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/HelveObl.ps
  • PDF转CAD软件合集/PDF FLY/fonts/NewCenSchBol.ps
  • PDF转CAD软件合集/PDF FLY/fonts/NewCenSchBolIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/NewCenSchIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/NewCenSchRom.ps
  • PDF转CAD软件合集/PDF FLY/fonts/PalatBol.ps
  • PDF转CAD软件合集/PDF FLY/fonts/PalatBolIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/PalatIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/PalatRom.ps
  • PDF转CAD软件合集/PDF FLY/fonts/Symbo.ps
  • PDF转CAD软件合集/PDF FLY/fonts/TimesBold.ps
  • PDF转CAD软件合集/PDF FLY/fonts/TimesBoldIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/TimesIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/TimesRom.ps
  • PDF转CAD软件合集/PDF FLY/fonts/ZapfChaMedIta.ps
  • PDF转CAD软件合集/PDF FLY/fonts/ZapfDin.ps
  • PDF转CAD软件合集/PDF FLY/fonts/etc/cour.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/courb.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/courbi.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/couri.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/dvrdef.dat
  • PDF转CAD软件合集/PDF FLY/fonts/etc/fonts.dat
  • PDF转CAD软件合集/PDF FLY/fonts/etc/helv.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/helvb.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/helvbi.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/helvi.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/symb.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/time.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/timeb.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/timebi.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/timei.t1
  • PDF转CAD软件合集/PDF FLY/fonts/etc/zapf.t1
  • PDF转CAD软件合集/PDF FLY/license.PDF
    .pdf
  • PDF转CAD软件合集/PDF FLY/license.txt
  • PDF转CAD软件合集/PDF FLY/options.pdf
    .pdf
    • http://Arial-Roman.ps

    • http://square1.nl

  • PDF转CAD软件合集/PDF FLY/pdf2xxx.exe
    .exe windows:4 windows x86 arch:x86

    c18789f5e1e1b4ea2c49104bf900a974


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/PDF FLY/pdf2xxx.ini
  • PDF转CAD软件合集/PDF FLY/pdfFLY.exe
    .exe windows:4 windows x86 arch:x86

    0ad5e0ba5cb51e8850b176da48372a1c


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/PDF FLY/pdffly-help.pdf
    .pdf
    • http://visual-integrity.com

    • http://visual-integrity.comftp.square1.nl

    • http://www.adobe.com/products/printerdrivers/main.html.TipTo

    • http://www.adobe.com/svg/viewer/install/main.html.

    • http://www.gzip.org

    • http://www.visual-integrity.com

    • http://www.w3.org/Graphics/SVG/Overview.htm8Using

  • PDF转CAD软件合集/PDF FLY/pdffly.cnt
  • PDF转CAD软件合集/PDF FLY/pdffly.ini
  • PDF转CAD软件合集/PDF FLY/ps+tiff2epsf.exe
    .exe windows:4 windows x86 arch:x86

    22788f183c2aaad9ebd03dcb36c3d774


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/PDF FLY/ps2xxx.exe
    .exe windows:4 windows x86 arch:x86

    c18789f5e1e1b4ea2c49104bf900a974


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/PDF FLY/ps2xxx.ini
  • PDF转CAD软件合集/PDF FLY/vgpsflow.dll
    .dll windows:4 windows x86 arch:x86

    b388671fa6ee12ae1e18b81118769f57


    Headers

    Imports

    Exports

    Sections

  • PDF转CAD软件合集/overcad_pdf2dwg挂在CAD内_setup/overcad_pdf2dwg挂在CAD内_setup.exe
    .exe windows:4 windows x86 arch:x86

    a23455b2d570c1e80b11b92360e41c00


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • appload.exe
    .exe windows:4 windows x86 arch:x86

    6c31b1061a7d363609c1151362a006ca


    Headers

    Imports

    Sections

  • license.txt
  • pdf2dwg15.arx
    .dll windows:4 windows x86 arch:x86

    1d3ec8a08d6928a35a5d51d95e31b35a


    Headers

    Imports

    Exports

    Sections

  • pdf2dwg16.arx
    .dll windows:4 windows x86 arch:x86

    50d72e97e9f7a0c6499139c7b747697b


    Headers

    Imports

    Exports

    Sections

  • pdf2dwg17.arx
    .dll windows:4 windows x86 arch:x86

    3f2623e4d07b6e3c9633c54b1cb51b0d


    Headers

    Imports

    Exports

    Sections

  • pj.dll
    .dll windows:4 windows x86 arch:x86

    8bb4e0a1151379f993d04196e14274fe


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    a23455b2d570c1e80b11b92360e41c00


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/overcad_pdf2dwg挂在CAD内_setup/read me.txt
  • PDF转CAD软件合集/pdf2cad 6.0_Crack/ENGiNE.nfo
  • PDF转CAD软件合集/pdf2cad 6.0_Crack/pdf2cad.EXE
    .exe windows:4 windows x86 arch:x86

    b238a3e50fadcb9c9eddb006db73388c


    Headers

    Imports

    Sections

  • PDF转CAD软件合集/pdf2cad 6.0_Crack/pdf2cad_v6.0_Crk.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PDF转CAD软件合集/说明.txt