General

  • Target

    03308fd93e29cb4aa48ac787e2d26266_JaffaCakes118

  • Size

    30.9MB

  • MD5

    03308fd93e29cb4aa48ac787e2d26266

  • SHA1

    e71734a70059d0ad716ae3e1a41aa0de430c8e89

  • SHA256

    e8f8a9d6c15c63dc4c0c618dc76111bdd815b0a4b9844ee7fef9dd203a9f72cf

  • SHA512

    0a2837fe74f14518e6af3b3a98a0e7199ca9eca142d01908b07414632137b29e3cec5a725d17eb1106ffad65263c8854894d277c83aca48dab58e901416a246d

  • SSDEEP

    786432:pLVOeQGm++vpuDZIKJ8DqqmxfBi/caXjiUH9:9UeQGmtp3KJOqXJQziA9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03308fd93e29cb4aa48ac787e2d26266_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1f23f452093b5c1ff091a2f9fb4fa3e9


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    80d2cb801bde4cc99c1fa6d82ac5a59e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    eafd69dcf4113dfd376ee9950d275970


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Statistics.exe
    .exe windows:4 windows x86 arch:x86

    176b3e26f589de2e46b3fdf6f08432ca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/pic/InstallingBG01.png
    .jpg
  • $PLUGINSDIR/pic/InstallingBG02.png
    .jpg
  • $PLUGINSDIR/pic/InstallingBG03.png
    .jpg
  • $PLUGINSDIR/pic/InstallingBG04.png
    .jpg
  • $PLUGINSDIR/pic/InstallingBG05.png
    .jpg
  • $PLUGINSDIR/pic/Minimize.png
    .png
  • $PLUGINSDIR/pic/bg1.png
    .png
  • $PLUGINSDIR/pic/bg2.png
    .png
  • $PLUGINSDIR/pic/bg3.png
    .png
  • $PLUGINSDIR/pic/bg4.png
    .png
  • $PLUGINSDIR/pic/browse.png
    .png
  • $PLUGINSDIR/pic/checkbox.png
    .png
  • $PLUGINSDIR/pic/close.png
    .png
  • $PLUGINSDIR/pic/custom.png
    .png
  • $PLUGINSDIR/pic/empty_bg.png
    .png
  • $PLUGINSDIR/pic/express.png
    .png
  • $PLUGINSDIR/pic/full_bg.png
    .png
  • $PLUGINSDIR/pic/logo.png
    .png
  • $PLUGINSDIR/pic/onekey.png
    .png
  • $PLUGINSDIR/pic/shadow_active.png
    .png
  • $PLUGINSDIR/pic/shadow_deactive.png
    .png
  • $PLUGINSDIR/pic/slogan.png
    .png
  • $PLUGINSDIR/pic/strongbtn.png
    .png
  • $PLUGINSDIR/pic/weakbtn.png
    .png
  • AsyncTask.dll
    .dll windows:5 windows x86 arch:x86

    19b0707c06d68b8b0db414edb81fbbd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BugReporter.exe
    .exe windows:5 windows x86 arch:x86

    f6854d37dddfcf7d8752f83ae5ad6ee0


    Code Sign

    Headers

    Imports

    Sections

  • CefSubProcess.dll
    .dll windows:5 windows x86 arch:x86

    8d42fd29f0ef8273da393329716d9f2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GF.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    157c9c5c2ea5b7d5f34db921e05839b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OcxHelper.exe
    .exe windows:5 windows x86 arch:x86

    bf7c6af7e7da113b636014e3794b2f09


    Code Sign

    Headers

    Imports

    Sections

  • ProcessSession.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    dc9e423848f3762c34eba38ebf9d3112


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLive.exe
    .exe windows:5 windows x86 arch:x86

    22f498e52168814a6bb592c75b124d85


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveBase.dll
    .dll windows:5 windows x86 arch:x86

    44d02542de7351299501479df6ba2a60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveBrowser.exe
    .exe windows:5 windows x86 arch:x86

    727b6b266cfeb0e724b4e41475d248e9


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveDisk.ico
  • QQLivePluginUpdate.exe
    .exe windows:5 windows x86 arch:x86

    a4a7f07764a8d48a1535aa209b1d6db6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveService.exe
    .exe windows:5 windows x86 arch:x86

    593c58cad1bc36e8427a2f73b14ecbeb


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveTips.exe
    .exe windows:4 windows x86 arch:x86

    6b75f46e826112f0adcb306f4fb47afb


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveUninstaller.exe
    .exe windows:4 windows x86 arch:x86

    1f23f452093b5c1ff091a2f9fb4fa3e9


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    80d2cb801bde4cc99c1fa6d82ac5a59e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    eafd69dcf4113dfd376ee9950d275970


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Statistics.exe
    .exe windows:4 windows x86 arch:x86

    176b3e26f589de2e46b3fdf6f08432ca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioC.ini
  • $TEMP/Statistics.exe
    .exe windows:4 windows x86 arch:x86

    176b3e26f589de2e46b3fdf6f08432ca


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveUp.exe
    .exe windows:5 windows x86 arch:x86

    3e0149bcbdc043eac9dbe04d5d3b50c0


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveX.exe
    .exe windows:5 windows x64 arch:x64

    8dbde8d8dbb758875c8095bf04912e6b


    Code Sign

    Headers

    Imports

    Sections

  • RICHED20.DLL
    .dll windows:4 windows x86 arch:x86

    19ebd6cf4c9e495eb30559a0feaea718


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/I18N/2052/PGFStringBundle.xml
    .xml
  • TXSSO/I18N/2052/SSOStringBundle.xml
    .xml
  • TXSSO/I18N/SSOConfig.xml
    .xml
  • TXSSO/bin/SSOCommon.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e94ffc52af2a4d53f1fc948617dc6a1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/SSOLUIControl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    862fa1c26645e9c4be19890b7bf4deb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/SSOPlatform.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    96a1f935606631a8bb26b756d7649564


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/npSSOAxCtrlForPTLogin.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4b91a05c89949115557d9d3948aa345c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TencentVideo.ico
  • TxBugReport.exe
    .exe windows:5 windows x86 arch:x86

    a53cc0b5073985516aa34e3fd3e07bd0


    Code Sign

    Headers

    Imports

    Sections

  • UnistHelper.exe
    .exe windows:5 windows x86 arch:x86

    1268d2d3ff523e60181b321815a3ff11


    Code Sign

    Headers

    Imports

    Sections

  • UpgradeHelper.exe
    .exe windows:6 windows x86 arch:x86

    45ed3a61d8bec93e7dd30353811df077


    Code Sign

    Headers

    Imports

    Sections

  • VNBase.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • VideoNative.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    0d64acc19f7465ff630f8dfc96b52849


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VideoReporterPC.dll
    .dll windows:5 windows x86 arch:x86

    32e32b8a0739373966346d22d1e51b6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • X64Helper.exe
    .exe windows:5 windows x86 arch:x86

    e287df171eb9037787e24d61a5f3eeab


    Code Sign

    Headers

    Imports

    Sections

  • arkFS.dll
    .dll windows:5 windows x86 arch:x86

    fa8b45cb01f31e73d7e3ee56537703ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkGraphic.dll
    .dll windows:5 windows x86 arch:x86

    9ab071265d0d94b3e860e7a74cb161f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkIOStub.dll
    .dll windows:5 windows x86 arch:x86

    fb1ce43c91f4fb8c23e808f6f061fcc7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkIPC.dll
    .dll windows:5 windows x86 arch:x86

    036e6fbfe46f4540acbc742a3d568201


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkImage.dll
    .dll windows:5 windows x86 arch:x86

    d950ecbda91c36f5dc540d36789e61f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cabarc.exe
    .exe windows:5 windows x86 arch:x86

    286c4a73c9ae31fbedb2b4e12f8feb6c


    Code Sign

    Headers

    Imports

    Sections

  • d3dSampleFile.mp4
  • dbgeng.dll
    .dll windows:6 windows x86 arch:x86

    ec9b9bb8f992e192bbdde14ea08cfeb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    fa6b094f828920cf8999743ff0004319


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpegsumo.dll
    .dll windows:5 windows x86 arch:x86

    14ff7e3dbcaa4526b96f29ff472c4d8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hardwarecheck.exe
    .exe windows:5 windows x86 arch:x86

    c8f8f88f3d80b4bf3f66ad8617374b22


    Code Sign

    Headers

    Imports

    Sections

  • icudtl.dat
  • jgIOStub.dll
    .dll windows:4 windows x86 arch:x86

    035865c038a769ffb5ad044b5b4c7efa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jgImage.dll
    .dll windows:4 windows x86 arch:x86

    1248a4640f38674a23b216c2377bd3d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jsonc.dll
    .dll windows:5 windows x86 arch:x86

    2fe3916fa5f67b9cd597b5199cc9ba95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    563a4415d15452c2641e2c912a00800d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    8caf6d8da75c93f964cb1b29241f8a8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    0809388af44456b6388bba32b96dd066


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libexpat.dll
    .dll windows:5 windows x86 arch:x86

    c157bbcecc45f4fa15658ac334ca8356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libimagequant.dll
    .dll windows:5 windows x86 arch:x86

    ee2e581facbaae23cbae96c6c66eb0a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libjpegturbo.dll
    .dll windows:5 windows x86 arch:x86

    82f316d14124bd92a4422c869479738a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libpng.dll
    .dll windows:5 windows x86 arch:x86

    6ffede990a404fff11a23a1590b3256b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libtcmalloc.dll
    .dll windows:5 windows x86 arch:x86

    22fe978ab097004800e4c94eb2dc6a5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libuv.dll
    .dll windows:5 windows x86 arch:x86

    bdfb66492d665113dee85df3623c15d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lua.dll
    .dll windows:5 windows x86 arch:x86

    bcf2a85bbf7596c2d2f0df4783759be4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • natives_blob.bin
    .js
  • natives_blob_v8.bin
    .js
  • p2plive.dll
    .dll windows:4 windows x86 arch:x86

    8652d6e90ef0b1cc1327bbfc30bc33b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2pliveEx.dll
    .dll windows:4 windows x86 arch:x86

    bc6fb5a3d722cbe65cbd93b722eec925


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qb.pak
    .js
  • qb_100_percent.pak
  • qb_200_percent.pak
  • qbcore.dll
    .dll windows:5 windows x86 arch:x86

    07a8c8d9a9487d23210c5325d3c2b9bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • snapshot_blob_v8.bin
  • sqlite.dll
    .dll windows:5 windows x86 arch:x86

    dc0e46da29f15da72805c64057f154ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    32bb53939e548e53658281d05fdf5bcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tinyxml.dll
    .dll windows:5 windows x86 arch:x86

    092b8b4f4bae5dd1e8605dcd8780eac2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xGraphic32.dll
    .dll windows:5 windows x86 arch:x86

    ea33e0429ee67a931e51abf988795572


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xImage.dll
    .dll windows:5 windows x86 arch:x86

    5cb874386cd2f4fc925f8961ed6c8ccf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:5 windows x86 arch:x86

    2b0bde2fba423c5ef1884272ac5f118f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 腾讯视频.library-ms
    .xml