General

  • Target

    42af8a31ea73e1f7322b1a86f58c7f18_JaffaCakes118

  • Size

    3.5MB

  • MD5

    42af8a31ea73e1f7322b1a86f58c7f18

  • SHA1

    260c8376ecc8c2c58011d902ca8b47fddb9e2c86

  • SHA256

    5c8dbf03a1f45997b2e786379007835b15804920bd6ae064faf94f3861737bb0

  • SHA512

    5521047b715c79e93e64ada9fe108c86c3fc60a4199bf97fa0ebf378cf9e22cd2677d58bea5039662a2b9c607cef3d7de3f3b68f7a22eb4a45bb5be85b40b1a2

  • SSDEEP

    98304:5ZobYQt85KTKzl4aJKQZ0CWX3uFCsyU2zXGi:Ift854m4aJKSBvEXGi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 42af8a31ea73e1f7322b1a86f58c7f18_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    c5f156d056c33464eb23dd13e24291cb


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    e6f3dce6886d94878a7c40c1c47cf2e4


    Headers

    Imports

    Exports

    Sections

  • UninstallMini.exe
    .exe windows:5 windows x86 arch:x86

    4eed28d28956e7bb23561677359dc9a6


    Headers

    Imports

    Exports

    Sections

  • ayprivoxy.exe
    .exe windows:4 windows x86 arch:x86

    a6c9fc5b4cb5e70120e5caaac4d22dc5


    Headers

    Imports

    Sections

  • aysocks5.exe
    .exe windows:5 windows x86 arch:x86

    ef8a910d78af5dc98d4d9e6134a974b6


    Headers

    Imports

    Sections

  • jiasuqi.exe
    .exe windows:5 windows x86 arch:x86

    71f23ffb53d369a96424fd4c4f927617


    Headers

    Imports

    Exports

    Sections

  • jiasuqiEx.exe
    .exe windows:5 windows x86 arch:x86

    5634d3930ac1bcf4dd9bd5c45ac9c992


    Headers

    Imports

    Exports

    Sections

  • jsqService.exe
    .exe windows:5 windows x86 arch:x86

    24f8b66ba17aaa1fe58d06c815077e99


    Headers

    Imports

    Exports

    Sections

  • mgwz.dll
    .dll windows:4 windows x86 arch:x86

    6e0d411d3fcca5990423266db759d223


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • privoxy.conf
  • uninstall.xml