General

  • Target

    5d58230bad83edbaddd1eff13c14d668_JaffaCakes118

  • Size

    3.3MB

  • MD5

    5d58230bad83edbaddd1eff13c14d668

  • SHA1

    8ebf6d88d0735177afdabb9225c7577da1eacdc2

  • SHA256

    36a09844b30146d2c4047c4436f3f0b97aaa0cb0515496927f9ac59574ad7370

  • SHA512

    18651fa295a2166a39e3111f5a1400ad42d25d6acbaec1b7dce1cad2cb500485807ec77da89805d8cbead50f1361d760474ad611afe9d661d7003f3b2af0c093

  • SSDEEP

    49152:eKCJjYmdc1OFBFA9CPLewjGShNEz7xjydzP6hzzv9ZMf0fQFhxZGn/DpCqJRAah9:eKCNBFQCawCSWhyZP8FBqxsrpCqJSamy

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d58230bad83edbaddd1eff13c14d668_JaffaCakes118
    .rar
  • 9553绿色软件站.htm
    .html
  • C_90000092.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BDLogicUtils.dll
    .dll windows:4 windows x86 arch:x86

    9f872404a9487d7b679df31f7bf2e6e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BDMDownload.dll
    .dll windows:4 windows x86 arch:x86

    926283aec44db36c7666690f04b5684e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BDMSkin.dll
    .dll windows:4 windows x86 arch:x86

    9708b1fa367ded5a4adc80ccf0775b34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    01028d90a68cce5b4b4f2b26eab7d522


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res/onlineWnd.zip
  • $PLUGINSDIR/tmp4nq6kr.dll
    .dll windows:4 windows x86 arch:x86

    ef67217b4ae97220d22508b7bd87c230


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zmaster_2.4.9_opda.apk
    .apk android arch:arm

    cn.com.opda.android.update

    SpalshActivity


  • RemoteTools.jar
    .apk android