General

  • Target

    399d264c0aa7a682451fb3f6cc3cd38a_JaffaCakes118

  • Size

    11.5MB

  • MD5

    399d264c0aa7a682451fb3f6cc3cd38a

  • SHA1

    8065558ba13e129dd5d60e7caae3b7c6ddd3c63a

  • SHA256

    211c37d00b6555ca57c72c779220f31fdb21394436066991149c604487b44991

  • SHA512

    3917e2e008e8af0f928d4e5848fecf80e154d76342d6ec4bf9028ef439c4551aa764f6cc2a928eceecfc720723a381882eacc4950d1b752f6f6f49395bc2a92f

  • SSDEEP

    196608:SsqspL1md8bNAL1OG7mFtE0dXxU6QgWKkgo5mIOE03hQAJ9DAfx8E:SipL1md8JAL1OGCnE6U6WKsvf0RdJlAL

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 399d264c0aa7a682451fb3f6cc3cd38a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • DuiLib.dll
    .dll windows:6 windows x86 arch:x86

    7c64e8084b47a455d46188818a58a737


    Headers

    Imports

    Exports

    Sections

  • DuiLib_u.dll
    .dll windows:6 windows x86 arch:x86

    496c4e8eed24171d98a6be746107d1b2


    Headers

    Imports

    Exports

    Sections

  • MeMeLiveShow.exe
    .exe windows:5 windows x86 arch:x86

    86918ce7f99e5858c1e7fa28a40e81cc


    Headers

    Imports

    Sections

  • UninstallMeMeLive.exe
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Headers

    Imports

    Sections

  • UpdateDlg.xml
  • config.ini
  • icon.ico
  • installstat.exe
    .exe windows:5 windows x86 arch:x86

    6b2162f492eb6255c287cf5fe69b1d9d


    Headers

    Imports

    Sections

  • jsʹ˵.txt
  • plugins/NPSWF32_18_0_0_209.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4546e0f89746257b262cdb08be4686af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • skin/MemeImgs/browser_tab_item.png
    .png
  • skin/MemeImgs/browser_tab_item_ext.png
    .png
  • skin/MemeImgs/browser_tab_item_press_ext.png
    .png
  • skin/MemeImgs/browser_tab_item_selected_ext.png
    .png
  • skin/MemeImgs/cancel_btn_normal.png
    .png
  • skin/MemeImgs/cancel_btn_press.png
    .png
  • skin/MemeImgs/circle_selected.png
    .png
  • skin/MemeImgs/circle_unselected.png
    .png
  • skin/MemeImgs/close_btn_normal.png
    .png
  • skin/MemeImgs/close_btn_press.png
    .png
  • skin/MemeImgs/combined-shape.png
    .png
  • skin/MemeImgs/copy.png
    .png
  • skin/MemeImgs/defaultPic.png
    .png
  • skin/MemeImgs/fav_tab_normal.png
    .png
  • skin/MemeImgs/fav_tab_selected.png
    .png
  • skin/MemeImgs/history_tab_normal.png
    .png
  • skin/MemeImgs/history_tab_selected.png
    .png
  • skin/MemeImgs/home_normal.png
    .png
  • skin/MemeImgs/home_press.png
    .png
  • skin/MemeImgs/item_list_bk.png
    .png
  • skin/MemeImgs/item_list_bk_2.png
    .png
  • skin/MemeImgs/list_empty.png
    .png
  • skin/MemeImgs/list_item_bk.png
    .png
  • skin/MemeImgs/login_close_btn.on_mouse.png
    .png
  • skin/MemeImgs/login_close_btn.on_normal.png
    .png
  • skin/MemeImgs/login_close_btn.on_normal_1.png
    .png
  • skin/MemeImgs/login_close_btn_press.png
    .png
  • skin/MemeImgs/logo.png
    .png
  • skin/MemeImgs/logox2.png
    .png
  • skin/MemeImgs/main_page_logo_normal.png
    .png
  • skin/MemeImgs/main_page_logo_press.png
    .png
  • skin/MemeImgs/max_btn_normal.png
    .png
  • skin/MemeImgs/max_btn_press.png
    .png
  • skin/MemeImgs/min_btn_normal.png
    .png
  • skin/MemeImgs/min_btn_press.png
    .png
  • skin/MemeImgs/mouse_in.png
    .png
  • skin/MemeImgs/ok_btn_normal.png
    .png
  • skin/MemeImgs/ok_btn_press.png
    .png
  • skin/MemeImgs/press.png
    .png
  • skin/MemeImgs/recovery_btn_normal.png
    .png
  • skin/MemeImgs/recovery_btn_press.png
    .png
  • skin/MemeImgs/selected.png
    .png
  • skin/MemeImgs/setting_normal.png
    .png
  • skin/MemeImgs/setting_press.png
    .png
  • skin/MemeImgs/tab_btn_press.png
    .png
  • skin/MemeImgs/tab_close_btn_normal.png
    .png
  • skin/MemeImgs/time_logo.png
    .png
  • skin/MemeImgs/unselected.png
    .png
  • skin/MemeImgs/user_info_popupbk.png
    .png
  • skin/MemeImgs/vscroll_bar.png
    .png
  • skin/MemeImgs/ѡ.png
    .png
  • skin/MemeMain.xml
  • skin/UserInfoPopWnd.xml
    .xml
  • skin/aboutDlg.xml
    .xml
  • skin/btn_cancel.png
    .png
  • skin/btn_ok.png
    .png
  • skin/check_update.xml
    .xml
  • skin/imgs/shadow.png
    .png
  • skin/loginWnd.xml
    .xml
  • skin/main.xml
    .xml
  • skin/menu.xml
    .xml
  • skin/menu/about_software_normal.png
    .png
  • skin/menu/about_software_selected.png
    .png
  • skin/menu/check_update_normal.png
    .png
  • skin/menu/check_update_selected.png
    .png
  • skin/menu/exit_icon.png
    .png
  • skin/menu/exit_logo.png
    .png
  • skin/menu/exit_normal.png
    .png
  • skin/menu/exit_selected.png
    .png
  • skin/menu/main_page_icon.png
    .png
  • skin/menu/menu_bk.png
    .png
  • skin/menu/menu_check.png
    .png
  • skin/menu/menu_expand.png
    .png
  • skin/menu/person_setting_normal.png
    .png
  • skin/menu/person_setting_selected.png
    .png
  • skin/menu/show_main_normal.png
    .png
  • skin/menu/show_main_selected.png
    .png
  • skin/menu/system_setting_normal.png
    .png
  • skin/menu/system_setting_selected.png
    .png
  • skin/msg.xml
  • skin/progress_backgroud.png
    .png
  • skin/progress_fore.png
    .png
  • skin/promptDlg.xml
    .xml
  • skin/res.xml
    .xml
  • skin/systemsetting.xml
    .xml
  • skin/title_back.png
    .png
  • skin/tray_menu.xml
    .xml
  • update.exe
    .exe windows:5 windows x86 arch:x86

    067f4a79e27b9c1ce4656a7a8796c272


    Headers

    Imports

    Sections

  • ver.ini
  • wke.dll
    .dll windows:5 windows x86 arch:x86

    77e316cc2cae5c76784149e222b407d3


    Headers

    Imports

    Exports

    Sections