General

  • Target

    38e12b35ebb8200b926efe63c4be73ee_JaffaCakes118

  • Size

    12.6MB

  • MD5

    38e12b35ebb8200b926efe63c4be73ee

  • SHA1

    e4694e998375b2aa789e54f3b931fc4d1e180c1a

  • SHA256

    88b3aa18a2ce796c619cfbaeea770b07e52ba755f44fdebc604fd2e4b7c0c9d4

  • SHA512

    528ae0790b9a2ac160c0951bd5359e3153041096afcf3cd2b9254910d72f3b391f93852cd75022cb20ad871a47e1c630b39db9074dc37661f23bb504d965e92b

  • SSDEEP

    393216:nr28ZX5yA7wr3Tph48DfVDg+M7e3NaXhFutliP:iMjQYIkr0IjEiP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 43 IoCs

    Checks for missing Authenticode signature.

Files

  • 38e12b35ebb8200b926efe63c4be73ee_JaffaCakes118
    .rar
  • ajjllvse/Help.exe
    .exe windows:4 windows x86 arch:x86

    3c3d5d632cb3c930f85d0105ba249565


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/Importer.exe
    .exe windows:4 windows x86 arch:x86

    e630a52e99cba1c17ccb05f90aaddfb1


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/QMColorActionCtl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    278ce3f6bca07a736fa9bba94f7a89b1


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/Recorder.exe
    .exe windows:5 windows x64 arch:x64

    2839cb0ebb031fc4407ca6c9690cb465


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/Syntconv.dll
    .dll windows:4 windows x86 arch:x86

    52fb12c4da53f5f2692b33e73eefd8da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/annotation.xml
    .xml
  • ajjllvse/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    e3493c33b4da4c9e132164b491c5d2cc


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/doc/command.ini
    .vbs
  • ajjllvse/doc/command.xml
    .vbs .xml polyglot
  • ajjllvse/doc/eula-qmacro.rtf
    .rtf
  • ajjllvse/doc/syntax.xml
  • ajjllvse/doc/web.ico
  • ajjllvse/doc/whatsnew.txt
  • ajjllvse/lib/API.html
    .html
  • ajjllvse/lib/API.qml
    .vbs
  • ajjllvse/lib/图像.html
    .html
  • ajjllvse/lib/图像.qml
    .vbs
  • ajjllvse/lib/文件.html
    .html
  • ajjllvse/lib/文件.qml
    .vbs
  • ajjllvse/lib/测试.qml
    .vbs
  • ajjllvse/lib/窗口.html
    .html
  • ajjllvse/lib/窗口.qml
    .vbs
  • ajjllvse/lib/算法.html
    .html
  • ajjllvse/lib/算法.qml
    .vbs
  • ajjllvse/lib/系统.html
    .html
  • ajjllvse/lib/系统.qml
  • ajjllvse/lib/网游.html
    .html
  • ajjllvse/lib/网游.qml
    .vbs
  • ajjllvse/lib/网络.html
    .html
  • ajjllvse/lib/网络.qml
    .vbs
  • ajjllvse/lib/键盘.html
    .html
  • ajjllvse/lib/键盘.qml
    .vbs
  • ajjllvse/mmt/mymacro.bmp
  • ajjllvse/mmt/【免费型】.mt9
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/picker.dll
    .dll windows:4 windows x86 arch:x86

    7422286e01cb866f6aa635902a4b9e4d


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/picker.exe
    .exe windows:4 windows x86 arch:x86

    8f842d994d45e4c918d7e51f6b153b9c


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/plugin/Bkgnd.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    afd0c76cb946728fd0639bbc36336f6e


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Bkgnd.ini
  • ajjllvse/plugin/Bkgnd.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e803a6fedb4e3e0a59ccfe0a833d3ce


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/BkgndColor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0b501e04791adaf9382223e7d946167b


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/BkgndColor.ini
  • ajjllvse/plugin/Color.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a4e85d5b35641d06eaa4aee3d57bd2da


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Color.ini
  • ajjllvse/plugin/Color.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    78cfb62b497e49781501abac8bc50d61


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/ColorEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    41093615c11ad02fcdcef71db8b7939c


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/ColorEx.ini
  • ajjllvse/plugin/ColorEx.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    594875067d04ba866f91089ee4af751c


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Console.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3ee25517d80f50b3dc6c3077fe84ed0f


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Console.ini
  • ajjllvse/plugin/Console.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    05e5315ecb6e3288c7c1b1d7c76a356a


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Encrypt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    142837ed94ddbf154f04f47094070bfe


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Encrypt.ini
  • ajjllvse/plugin/Encrypt.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c125471084411a6bd855be0ebf4c378f


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/File.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/File.ini
  • ajjllvse/plugin/File.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    69f8b9fb23a868cec043acc9adc26d96


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/GetSysInfo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c7e26a54a63442c678a21968d23a3416


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/GetSysInfo.ini
  • ajjllvse/plugin/Media.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ad4a40c665cadb0f107e26d05c0debd6


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Media.ini
  • ajjllvse/plugin/Media.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cf7d2c1c00c258615d943edf56e6690


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Memory.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    782fb5d2779c606c6cb3e9c92d6db5a7


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Memory.ini
  • ajjllvse/plugin/Memory.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    65af37bae664fe4f72f838f0ca2bbe0a


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Msg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    822d3ecf48a41b86df18a99da942259e


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Msg.ini
  • ajjllvse/plugin/Msg.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    05e5315ecb6e3288c7c1b1d7c76a356a


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Net.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f31db322725c89acdcdc646dbdcd3bb6


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Net.ini
  • ajjllvse/plugin/Net.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    fc86e7549caca62c14ba61a1b65b78f9


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Office.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a407438b8c4a71fae32a332f8c5a817e


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Office.ini
  • ajjllvse/plugin/Office.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e4d28ee25dc45ebbecc0bc70e22dd561


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Pic.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9d837035acaae8b82110cf620a038f18


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Pic.ini
  • ajjllvse/plugin/Pic.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e15b89e99b38af09d70c1b256a846ff


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Sys.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    00152502c43abfdcbd575d939db597b2


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Sys.ini
  • ajjllvse/plugin/Sys.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e803a6fedb4e3e0a59ccfe0a833d3ce


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Web.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3bda4e16faafbd5c4a3fdaf434f98b0a


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Web.ini
  • ajjllvse/plugin/Web.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    f6d2a5c8edfef3fd3d1856245e008255


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Window.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    83008a536ed5f37cb5c6b7641fa8c04b


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/plugin/Window.ini
  • ajjllvse/plugin/Window.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e803a6fedb4e3e0a59ccfe0a833d3ce


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/qmacro.ini
  • ajjllvse/refs.dll
    .dll windows:5 windows x86 arch:x86

    fbeb4357592c9ba44cf88121499db022


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/refs64.dll
    .dll windows:5 windows x64 arch:x64

    0a6e7c480a6ce148356b7c0e89402464


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/source/File插件源代码(VC 6.0).zip
    .zip
  • CQMPlugin.cpp
  • CQMPlugin.h
  • CommonLib.lib
  • CommonLibD.lib
  • File.dsp
  • File.dsw
  • QMPlugin.clw
  • QMPlugin.def
  • QMPlugin.odl
  • QMPlugin.rc
  • Resource.h
  • StdAfx.cpp
  • StdAfx.h
  • ajjllvse/source/QMPlugin插件制作模版(Delphi).rar
    .rar
  • QMPlugin插件制作模版(Delphi)/QMPlugin.cfg
  • QMPlugin插件制作模版(Delphi)/QMPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QMPlugin插件制作模版(Delphi)/QMPlugin.dof
  • QMPlugin插件制作模版(Delphi)/QMPlugin.dpr
  • QMPlugin插件制作模版(Delphi)/QMPlugin.res
  • QMPlugin插件制作模版(Delphi)/QMPlugin.tlb
  • QMPlugin插件制作模版(Delphi)/QMPlugin_TLB.dcu
  • QMPlugin插件制作模版(Delphi)/QMPlugin_TLB.pas
  • QMPlugin插件制作模版(Delphi)/coMain.dcu
  • QMPlugin插件制作模版(Delphi)/coMain.pas
  • QMPlugin插件制作模版(Delphi)/uQMPlugIn.dcu
  • QMPlugin插件制作模版(Delphi)/uQMPlugIn.pas
  • ajjllvse/source/QMPlugin插件制作模版(VB 6.0).zip
    .zip
  • MSSCCPRJ.SCC
  • MyPlugin.cls
    .vbs
  • QMPlugin.exp
  • QMPlugin.vbp
  • QMPlugin.vbw
  • Translate.bas
    .vbs
  • ajjllvse/source/QMPlugin插件制作模版(VC 6.0).zip
    .zip
  • QMPluginWizard.awx
    .dll windows:4 windows x86 arch:x86

    bbd6d3d96e4255de0990922586985db1


    Headers

    Imports

    Sections

  • readme.txt
  • ajjllvse/source/QMPlugin插件制作模版(易语言).zip
    .zip
  • Common.ec
  • QMPlugin.e
  • Բ˵.jpg
    .jpg
  • ajjllvse/source/自定义界面例子(VB 6.0).zip
    .zip
  • VB-BIG-001/Helper.bas
    .vbs
  • VB-BIG-001/MSSCCPRJ.SCC
  • VB-BIG-001/QMacroUI.ctl
    .vbs
  • VB-BIG-001/QMacroUI.ctx
  • VB-BIG-001/QMacroUI.vbp
  • VB-BIG-001/QMacroUI.vbw
  • VB-BIG-001/logo.jpg
    .jpg
  • VB-BIG-002/Helper.bas
    .vbs
  • VB-BIG-002/MSSCCPRJ.SCC
  • VB-BIG-002/QMacroUI.ctl
    .vbs
  • VB-BIG-002/QMacroUI.ctx
  • VB-BIG-002/QMacroUI.vbp
  • VB-BIG-002/QMacroUI.vbw
  • VB-BIG-002/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VB-BIG-002/˵.txt
  • Զʹ˵.txt
  • ajjllvse/tools/Merge/Languages/TortoiseMerge2052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ajjllvse/tools/Merge/bin/TortoiseMerge.exe
    .exe windows:4 windows x86 arch:x86

    cb7c3f73500194bd12816706a458ff08


    Headers

    Imports

    Sections

  • ajjllvse/tools/Merge/bin/intl3_svn.dll
    .dll windows:4 windows x86 arch:x86

    3761595a8e4b18475b752a438167c12a


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/tools/Merge/bin/libapr_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    2e00c0d99ce9edb2f3be2c5d9c356acd


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/tools/Merge/bin/libapriconv_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    7959cb240b2d58d2b9d6056e2ce74523


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/tools/Merge/bin/libaprutil_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    d720325bdc518bbb5eecae9ef8e03219


    Headers

    Imports

    Exports

    Sections

  • ajjllvse/tools/Merge/bin/mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    4ca444b09cab86ae48fe835cb05c6e94


    Headers

    Imports

    Sections

  • ajjllvse/tools/Merge/bin/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/tools/Merge/bin/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/unins000.dat
  • ajjllvse/unins000.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • ajjllvse/update.exe
    .exe windows:4 windows x86 arch:x86

    478274080776d8a69777700d5535592c


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/wqm.exe
    .exe windows:5 windows x86 arch:x86

    399dd6c19a3202685045179d5c3a4ff8


    Code Sign

    Headers

    Imports

    Sections

  • ajjllvse/使用说明.txt
  • ajjllvse/按键精灵9.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ajjllvse/绿软基地.url
    .url