General

  • Target

    fa07feb001a2b059fb1a4f99174f6d36_JaffaCakes118

  • Size

    6.7MB

  • MD5

    fa07feb001a2b059fb1a4f99174f6d36

  • SHA1

    19ab2be1154754e6ebaa4e27f5d36253f43a4bd2

  • SHA256

    e8300b67140658696363f0d01c7f53542479ae3a66dd7f9298ff7322bdfe25d3

  • SHA512

    5f3728fffdaf214f321c1658b14064f22bdb96b2a64e9b5cc9038675c9414bc80e29bdc1e252c7dd94add28216cb4d5c758b0b9a97f20362282c393a1c5d7166

  • SSDEEP

    196608:aRbx+aF5qwAzFd5inpKnK3H/3C+f0isfkWhM6hlcsjzC:aD+aF5q3zFd5/K/CxRhMAlc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

Files

  • fa07feb001a2b059fb1a4f99174f6d36_JaffaCakes118
    .rar
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/toogor.ini
  • $SYSDIR/GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SQLITE3.dll
    .dll windows:4 windows x86 arch:x86

    61bbec182451b7bb08309b2a788d1d22


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/TOOGOR.SCR
    .exe windows:4 windows x86 arch:x86

    82add1753b7bdb85ef235f284fef305b


    Headers

    Imports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • BugReporter.exe
    .exe windows:4 windows x86 arch:x86

    ea12ed0918b49d2bc365ccc4c2a69cb2


    Headers

    Imports

    Sections

  • CompressDB.exe
    .exe windows:4 windows x86 arch:x86

    ac69c021b57ca0a655d6efea35987eb1


    Headers

    Imports

    Sections

  • IM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5ba4f3cc926f275c0e51b2ea1e195c7d


    Headers

    Imports

    Exports

    Sections

  • ImgEditor.exe
    .exe windows:4 windows x86 arch:x86

    3a49eec5e2dc793d576b369cb427dde7


    Headers

    Imports

    Sections

  • Logo.png
    .png
  • PicEditor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cf3cbb92caaa5ab6105f456deb9ba00e


    Headers

    Imports

    Exports

    Sections

  • PicTrans.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    422d60602cb786fcdc2ed576a0e7f8df


    Headers

    Imports

    Exports

    Sections

  • PicUpload.exe
    .exe windows:4 windows x86 arch:x86

    2670ef26dff66269a26909f9423d1d17


    Headers

    Imports

    Sections

  • PicViewer.dll
    .dll windows:4 windows x86 arch:x86

    64df523a2128f41170bc2dd440c4fe81


    Headers

    Imports

    Exports

    Sections

  • SQLITE3.dll
    .dll windows:4 windows x86 arch:x86

    61bbec182451b7bb08309b2a788d1d22


    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    7313ea3d531f5495e24f4a581af165b3


    Headers

    Imports

    Sections

  • ShellEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf706d799e2b2af8c239089498c63ece


    Headers

    Imports

    Exports

    Sections

  • Sound/Global.wav
  • Sound/msg.wav
  • Sound/system.wav
  • SwfAnalyzer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8845a6930adf1fa09d99152efed7c999


    Headers

    Imports

    Exports

    Sections

  • TextEditor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    689c17a7ee5208991bc04eaae9414241


    Headers

    Imports

    Exports

    Sections

  • ToogorUninstall.exe
    .exe windows:4 windows x86 arch:x86

    1b46904b8a0e2c78542b6f30b71f7456


    Headers

    Imports

    Sections

  • WebDesk.exe
    .exe windows:4 windows x86 arch:x86

    04eab65affe958f4c6406a5a1f03b733


    Headers

    Imports

    Sections

  • config.ini
  • detoured.dll
    .dll windows:4 windows x86 arch:x86

    6c8408bb5d7d5a5b75b9314f94e68763


    Headers

    Imports

    Exports

    Sections

  • face/Default/01.gif
    .gif
  • face/Default/02.gif
    .gif
  • face/Default/03.gif
    .gif
  • face/Default/04.gif
    .gif
  • face/Default/05.gif
    .gif
  • face/Default/06.gif
    .gif
  • face/Default/07.gif
    .gif
  • face/Default/08.gif
    .gif
  • face/Default/09.gif
    .gif
  • face/Default/10.gif
    .gif
  • face/Default/11.gif
    .gif
  • face/Default/12.gif
    .gif
  • face/Default/index.xml
    .xml
  • face/index.xml
    .xml
  • log.ico
  • log4cpp.dll
    .dll windows:4 windows x86 arch:x86

    f3b97859f332f47648fb981ea3368e53


    Headers

    Imports

    Exports

    Sections

  • pdfRender.dll
    .dll windows:4 windows x86 arch:x86

    9867b97830ec45f761213d95c6ff3813


    Headers

    Imports

    Exports

    Sections

  • skin/õ/Close.bmp
  • skin/õ/NodeClose.png
    .png
  • skin/õ/NodeOpen.png
    .png
  • skin/õ/bar3.JPG
    .jpg
  • skin/õ/btnImg0.png
    .png
  • skin/õ/btnImg1.png
    .png
  • skin/õ/btnImg2.png
    .png
  • skin/õ/btnImg3.png
    .png
  • skin/õ/btnset.png
    .png
  • skin/õ/chat.png
    .png
  • skin/õ/fold.png
    .png
  • skin/õ/frame.jpg
    .jpg
  • skin/õ/lsb.bmp
  • skin/õ/rsb.bmp
  • skin/õ/skin.ini
  • skin/õ/stbg.jpg
    .jpg
  • skin/õ/tab.png
    .png
  • skin/õ/tab_sel.png
    .png
  • skin/õ/tbMenu.bmp
  • skin/õ/tbSep.PNG
    .png
  • skin/õ/tbbg.png
    .png
  • skin/õ/tbbg1.png
    .png
  • skin/õ/tbbg2.png
    .png
  • skin/õ/tbbg3.png
    .png
  • skin/õ/tbbg4.png
    .png
  • skin/õ/tbbghi.png
    .png
  • skin/õ/unfold.png
    .png
  • skin/õ/upgradebar.jpg
    .jpg
  • skin/õ/.jpg
    .jpg
  • skin/õ/Ϸť.png
    .png
  • skin/õ/.jpg
    .jpg
  • skin/õ/ưť.png
    .png
  • skin/ˮ/Close.bmp
  • skin/ˮ/NodeClose.png
    .png
  • skin/ˮ/NodeOpen.png
    .png
  • skin/ˮ/bar3.JPG
    .jpg
  • skin/ˮ/btnImg0.png
    .png
  • skin/ˮ/btnImg1.png
    .png
  • skin/ˮ/btnImg2.png
    .png
  • skin/ˮ/btnImg3.png
    .png
  • skin/ˮ/btnset.png
    .png
  • skin/ˮ/chat.png
    .png
  • skin/ˮ/fold.png
    .png
  • skin/ˮ/frame.jpg
    .jpg
  • skin/ˮ/lsb.bmp
  • skin/ˮ/rsb.bmp
  • skin/ˮ/skin.ini
  • skin/ˮ/stbg.jpg
    .jpg
  • skin/ˮ/tab.png
    .png
  • skin/ˮ/tab_sel.png
    .png
  • skin/ˮ/tbMenu.bmp
  • skin/ˮ/tbSep.PNG
    .png
  • skin/ˮ/tbbg.png
    .png
  • skin/ˮ/tbbg1.png
    .png
  • skin/ˮ/tbbg2.png
    .png
  • skin/ˮ/tbbg3.png
    .png
  • skin/ˮ/tbbg4.png
    .png
  • skin/ˮ/tbbghi.png
    .png
  • skin/ˮ/unfold.png
    .png
  • skin/ˮ/upgradebar.jpg
    .jpg
  • skin/ˮ/.jpg
    .jpg
  • skin/ˮ/Ϸť.png
    .png
  • skin/ˮ/.jpg
    .jpg
  • skin/ˮ/ưť.png
    .png
  • skin//NodeClose.png
    .png
  • skin//NodeOpen.png
    .png
  • skin//bar3.JPG
    .jpg
  • skin//btnImg0.png
    .png
  • skin//btnImg1.png
    .png
  • skin//btnImg2.png
    .png
  • skin//btnImg3.png
    .png
  • skin//btnset.png
    .png
  • skin//chat.png
    .png
  • skin//frame.jpg
    .png
  • skin//skin.ini
  • skin//stbg.jpg
    .jpg
  • skin//tab.png
    .png
  • skin//tab_sel.png
    .png
  • skin//tbbg1.png
    .png
  • skin//tbbg2.png
    .png
  • skin//tbbg3.png
    .png
  • skin//tbbg4.png
    .png
  • skin//upgradebar.jpg
    .jpg
  • skin//.jpg
    .jpg
  • skin//Ϸť.png
    .png
  • skin//.jpg
    .jpg
  • skin//ưť.png
    .png
  • skin/ɫ/Close.bmp
  • skin/ɫ/NodeClose.png
    .png
  • skin/ɫ/NodeOpen.png
    .png
  • skin/ɫ/bar3.JPG
    .jpg
  • skin/ɫ/btnImg0.png
    .png
  • skin/ɫ/btnImg1.png
    .png
  • skin/ɫ/btnImg2.png
    .png
  • skin/ɫ/btnImg3.png
    .png
  • skin/ɫ/btnset.png
    .png
  • skin/ɫ/chat.png
    .png
  • skin/ɫ/fold.png
    .png
  • skin/ɫ/frame.jpg
    .jpg
  • skin/ɫ/lsb.bmp
  • skin/ɫ/rsb.bmp
  • skin/ɫ/skin.ini
  • skin/ɫ/stbg.jpg
    .jpg
  • skin/ɫ/tab.png
    .png
  • skin/ɫ/tab_sel.png
    .png
  • skin/ɫ/tb.png
    .png
  • skin/ɫ/tbMenu.bmp
  • skin/ɫ/tbSep.PNG
    .png
  • skin/ɫ/tbbg.png
    .png
  • skin/ɫ/tbbg1.png
    .png
  • skin/ɫ/tbbg2.png
    .png
  • skin/ɫ/tbbg3.png
    .png
  • skin/ɫ/tbbg4.png
    .png
  • skin/ɫ/tbbghi.png
    .png
  • skin/ɫ/unfold.png
    .png
  • skin/ɫ/upgradebar.jpg
    .jpg
  • skin/ɫ/.jpg
    .jpg
  • skin/ɫ/Ϸť.png
    .png
  • skin/ɫ/.jpg
    .jpg
  • skin/ɫ/ưť.png
    .png
  • skin/ʻ/Close.bmp
  • skin/ʻ/NodeClose.png
    .png
  • skin/ʻ/NodeOpen.png
    .png
  • skin/ʻ/bar3.JPG
    .jpg
  • skin/ʻ/btnImg0.png
    .png
  • skin/ʻ/btnImg1.png
    .png
  • skin/ʻ/btnImg2.png
    .png
  • skin/ʻ/btnImg3.png
    .png
  • skin/ʻ/btnset.png
    .png
  • skin/ʻ/chat.png
    .png
  • skin/ʻ/fold.png
    .png
  • skin/ʻ/frame.jpg
    .jpg
  • skin/ʻ/lsb.bmp
  • skin/ʻ/rsb.bmp
  • skin/ʻ/skin.ini
  • skin/ʻ/stbg.jpg
    .jpg
  • skin/ʻ/tab.png
    .png
  • skin/ʻ/tab_sel.png
    .png
  • skin/ʻ/tbMenu.bmp
  • skin/ʻ/tbSep.PNG
    .png
  • skin/ʻ/tbbg.png
    .png
  • skin/ʻ/tbbg1.png
    .png
  • skin/ʻ/tbbg2.png
    .png
  • skin/ʻ/tbbg3.png
    .png
  • skin/ʻ/tbbg4.png
    .png
  • skin/ʻ/tbbghi.png
    .png
  • skin/ʻ/unfold.png
    .png
  • skin/ʻ/upgradebar.jpg
    .jpg
  • skin/ʻ/.jpg
    .jpg
  • skin/ʻ/Ϸť.png
    .png
  • skin/ʻ/.jpg
    .jpg
  • skin/ʻ/ưť.png
    .png
  • skin//Close.bmp
  • skin//NodeClose.png
    .png
  • skin//NodeOpen.png
    .png
  • skin//bar3.JPG
    .jpg
  • skin//btnImg0.png
    .png
  • skin//btnImg1.png
    .png
  • skin//btnImg2.png
    .png
  • skin//btnImg3.png
    .png
  • skin//btnset.png
    .png
  • skin//chat.png
    .png
  • skin//fold.png
    .png
  • skin//frame.jpg
    .jpg
  • skin//lsb.bmp
  • skin//rsb.bmp
  • skin//skin.ini
  • skin//stbg.jpg
    .jpg
  • skin//tab.png
    .png
  • skin//tab_sel.png
    .png
  • skin//tbMenu.bmp
  • skin//tbSep.PNG
    .png
  • skin//tbbg.png
    .png
  • skin//tbbg1.png
    .png
  • skin//tbbg2.png
    .png
  • skin//tbbg3.png
    .png
  • skin//tbbg4.png
    .png
  • skin//tbbghi.png
    .png
  • skin//unfold.png
    .png
  • skin//upgradebar.jpg
    .jpg
  • skin//.jpg
    .jpg
  • skin//Ϸť.png
    .png
  • skin//.jpg
    .jpg
  • skin//ưť.png
    .png
  • skin/ɫ/Close.bmp
  • skin/ɫ/NodeClose.png
    .png
  • skin/ɫ/NodeOpen.png
    .png
  • skin/ɫ/bar3.JPG
    .jpg
  • skin/ɫ/btnImg0.png
    .png
  • skin/ɫ/btnImg1.png
    .png
  • skin/ɫ/btnImg2.png
    .png
  • skin/ɫ/btnImg3.png
    .png
  • skin/ɫ/btnset.png
    .png
  • skin/ɫ/chat.png
    .png
  • skin/ɫ/fold.png
    .png
  • skin/ɫ/frame.jpg
    .jpg
  • skin/ɫ/lsb.bmp
  • skin/ɫ/rsb.bmp
  • skin/ɫ/skin.ini
  • skin/ɫ/stbg.jpg
    .jpg
  • skin/ɫ/tab.png
    .png
  • skin/ɫ/tab_sel.png
    .png
  • skin/ɫ/tbMenu.bmp
  • skin/ɫ/tbSep.PNG
    .png
  • skin/ɫ/tbbg.png
    .png
  • skin/ɫ/tbbg1.png
    .png
  • skin/ɫ/tbbg2.png
    .png
  • skin/ɫ/tbbg3.png
    .png
  • skin/ɫ/tbbg4.png
    .png
  • skin/ɫ/tbbghi.png
    .png
  • skin/ɫ/unfold.png
    .png
  • skin/ɫ/upgradebar.jpg
    .jpg
  • skin/ɫ/.jpg
    .jpg
  • skin/ɫ/Ϸť.png
    .png
  • skin/ɫ/.jpg
    .jpg
  • skin/ɫ/ưť.png
    .png
  • toogor.jpg
    .jpg
  • toogor.swf
  • toogordef.jpg
    .jpg
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • 新云软件.url
    .url