General

  • Target

    feaeaab94915413be8deaefa7530cb7a_JaffaCakes118

  • Size

    3.2MB

  • MD5

    feaeaab94915413be8deaefa7530cb7a

  • SHA1

    5a45086cc822614070311506787919e6f80c9839

  • SHA256

    58ba387e6f3873e47fd410e90a4694599a8b6ac0d4a2d66247335d79d37282df

  • SHA512

    c5b76057bfe6c9a83391146ff5741b065e5106d92ba621966ca915a4e809472f36693903a8b7335dd86597fe4f7c26d90286375709001a74a4902ab63e9bc011

  • SSDEEP

    49152:XxWeQatbQjJv+lWKXWN1iw6EHnaJsY+kmpAHa5qUJ442SVmaXVWFBo6V/vlTk0nG:MUgAg36GS2mHafW4HLXIFZvap

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • feaeaab94915413be8deaefa7530cb7a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/xiaoxiaobrowser.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Language/ChineseGB.ini
  • Resource/SearchEngine.ini.default
  • Resource/XXStatistic.exe
    .exe windows:4 windows x86 arch:x86

    5208deff57d1b41fb08338dda50c84e5


    Headers

    Imports

    Sections

  • Resource/XiaoXiao.ini.default
  • Resource/update.cfg
  • SafeBrowser.dll
    .dll windows:4 windows x86 arch:x86

    b0aa8b6ae07c8d3fe43f103af79d6e75


    Headers

    Imports

    Exports

    Sections

  • Skin/Default/BackGround.bmp
  • Skin/Default/FavBar.bmp
  • Skin/Default/Go.bmp
  • Skin/Default/MainMenu.bmp
  • Skin/Default/MainTool16.bmp
  • Skin/Default/MainTool24.bmp
  • Skin/Default/MainToolGray16.bmp
  • Skin/Default/MainToolGray24.bmp
  • Skin/Default/SearchBar.bmp
  • Skin/Default/StatusTool.bmp
  • Skin/Default/SystemBar.bmp
  • Skin/Default/TabActive.bmp
  • Skin/Default/TabClose.bmp
  • Skin/Default/TabNormal.bmp
  • Skin/Default/TaskBar.bmp
  • Skin/Default/skin.ini
  • XiaoXiao.exe
    .exe windows:4 windows x86 arch:x86

    2d7d906c46496458412afc1a6c575d0f


    Headers

    Imports

    Sections

  • XiaoXiaoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    9f65071ca119913286044f615b393b5d


    Headers

    Imports

    Sections

  • gsb/black.dat
  • gsb/malware.dat