General

  • Target

    6bbf8fb5f4beebeae4bb38b6391b5765_JaffaCakes118

  • Size

    10.5MB

  • MD5

    6bbf8fb5f4beebeae4bb38b6391b5765

  • SHA1

    15b4bd2d69d58284a20cb209c7d5e4536e740ba1

  • SHA256

    aa6ba88663d7ef7f4089beae13e9eccb9d1f750df2f39f9b8335bb0c2c7ba791

  • SHA512

    d1c7628755ffa6d44de8cfd10ee3a96c3d501a85915cb818db5e061f741cdc84a290be019a75a7533d94b0fdf4127463100eb5710c56077aa4c55e35f60802e1

  • SSDEEP

    196608:GFGA2JPv9MPWA6LRDDyNRzeHcugpOILYVBIhNzacpVM0Zr:lPv46LoBju/ILYVWhfPMar

Score
3/10

Malware Config

Signatures

  • Unsigned PE 50 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • 6bbf8fb5f4beebeae4bb38b6391b5765_JaffaCakes118
    .7z
  • 3Dbc.exe
    .exe windows:5 windows x86 arch:x86

    068e086290d4b3725133232c84864d94


    Code Sign

    Headers

    Imports

    Sections

  • 3Dbt.exe
    .exe windows:4 windows x86 arch:x86

    b1a57b635b23ffd553b3fd1e0960b2bd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    ec04767df02d0f5e543bd9bd399afce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • dwqjh_wqed.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • fancysetup.exe
    .exe windows:5 windows x86 arch:x86

    2bca1372d9ae6e1c5ddad358699a3352


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections

  • CfgDown.dll
    .dll windows:6 windows x86 arch:x86

    7316b1fea4626d4301893ae379ec618d


    Headers

    Imports

    Sections

  • ClearEnv.exe
    .exe windows:6 windows x86 arch:x86

    66c190594f351f6bfe8e831cff9c3223


    Headers

    Imports

    Sections

  • IconFile.exe
    .exe windows:5 windows x86 arch:x86

    a48060abd21decaef520b237107d8f66


    Headers

    Imports

    Sections

  • KDConfig.ini
  • Middleware.dll
    .dll windows:6 windows x86 arch:x86

    8ba9e11736b6fe2e872508104652d462


    Headers

    Imports

    Exports

    Sections

  • ResourceTopology.dll
    .dll windows:6 windows x86 arch:x86

    b23c68bb7790e9f2ea14b498fc8b57e3


    Headers

    Imports

    Sections

  • SafeLoad.exe
    .exe windows:6 windows x86 arch:x86

    7865bde2fef5afebf030f64daad33afb


    Headers

    Imports

    Sections

  • XHTMLAI.dll
    .dll windows:5 windows x86 arch:x86

    b1367580764db3634c98ce7001ac68f0


    Headers

    Imports

    Exports

    Sections

  • asdll.dll
    .dll windows:5 windows x86 arch:x86

    61340176e952c82c683e2e52167be45c


    Headers

    Imports

    Sections

  • boxReport.dll
    .dll windows:6 windows x86 arch:x86

    9101da38b4277fff69678bf0a9c19d3c


    Headers

    Imports

    Exports

    Sections

  • business.ini
  • charging.exe
    .exe windows:5 windows x86 arch:x86

    a8236c06b02543277168b9352930d252


    Headers

    Imports

    Sections

  • checkReport.dll
    .dll windows:6 windows x86 arch:x86

    db084c7e1130d1d46386681e33aa0b32


    Headers

    Imports

    Exports

    Sections

  • dropreport.dll
    .dll windows:6 windows x64 arch:x64

    32a0a13653913150c119c4a2a80a2e4d


    Headers

    Imports

    Exports

    Sections

  • gamebox.exe
    .exe windows:5 windows x86 arch:x86

    aae58c3eb2874b838e007f0fdeac52bb


    Headers

    Imports

    Sections

  • hotpatch.exe
    .exe windows:6 windows x86 arch:x86

    4655c4cc4e3a300d155c9c13b72e8955


    Headers

    Imports

    Sections

  • icoProxy.exe
    .exe windows:5 windows x86 arch:x86

    30f30b62cde830a4ce287ebf621dfcf3


    Headers

    Imports

    Sections

  • mkbrowserpreload.exe
    .exe windows:5 windows x86 arch:x86

    8752e91c43adeddafef271bd213070b1


    Headers

    Imports

    Sections

  • prepatch.exe
    .exe windows:6 windows x86 arch:x86

    16180e7d58c8af25470993014fcc6f13


    Code Sign

    Headers

    Imports

    Sections

  • repage36.exe
    .exe windows:6 windows x86 arch:x86

    221450efada90b95ad3354cbd80da9bf


    Headers

    Imports

    Sections

  • svrReport.exe
    .exe windows:6 windows x86 arch:x86

    0ec0e16e403dbde40388c78576a3ad82


    Headers

    Imports

    Sections

  • wzBaseDataReportEx.dll
    .dll windows:6 windows x86 arch:x86

    1c31b07c25e1bfef0ce640d45328c2b0


    Code Sign

    Headers

    Imports

    Sections

  • wzBaseDataReportExCli.dll
    .dll windows:6 windows x86 arch:x86

    d77218ff1e57c0e689f4798947a111e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wzBrowserReport.dll
    .dll windows:6 windows x86 arch:x86

    ea3616c59cadf3c82fe7070dfb666e64


    Code Sign

    Headers

    Imports

    Sections

  • wzBussInject.exe
    .exe windows:5 windows x86 arch:x86

    0128f671aff5b19f1da4d96dd08e8828


    Headers

    Imports

    Sections

  • wzDataAnayze.dll
    .dll windows:6 windows x86 arch:x86

    2f87b13dbb3142d59032768dafba9a3c


    Code Sign

    Headers

    Imports

    Sections

  • wzHardReport.dll
    .dll windows:6 windows x86 arch:x86

    162beb66dc16ef413102f6c5d04702c4


    Headers

    Imports

    Sections

  • wzIex64.dll
    .dll windows:5 windows x64 arch:x64

    34dce485154213571f21d7e81c4881f5


    Headers

    Imports

    Sections

  • wzIex86.dll
    .dll windows:5 windows x86 arch:x86

    111125bc2f79378fc673b0f1eac232cd


    Headers

    Imports

    Sections

  • wzPlatformReport.dll
    .dll windows:6 windows x86 arch:x86

    c836a566c16e4b7c813607c09b977648


    Headers

    Imports

    Sections

  • wzReportDesktopInject.dll
    .dll windows:6 windows x86 arch:x86

    bbabf4fe7ed6f2ca386d016f536abece


    Code Sign

    Headers

    Imports

    Sections

  • wzReportx64.dll
    .dll windows:6 windows x64 arch:x64

    3871d8d3a756b7ce6bdc872da7c0a51c


    Headers

    Imports

    Exports

    Sections

  • wzReportx86.dll
    .dll windows:6 windows x86 arch:x86

    9101da38b4277fff69678bf0a9c19d3c


    Headers

    Imports

    Exports

    Sections

  • wzSearchEngines.dll
    .dll windows:6 windows x86 arch:x86

    53795b51baa0b8fa70af2e55f1eab9bd


    Headers

    Imports

    Sections

  • wzSysMonDll.dll
    .dll windows:5 windows x86 arch:x86

    8d78a1b70fe25ba02a99d0a10dd6e61a


    Headers

    Imports

    Exports

    Sections

  • wzconhost.exe
    .exe windows:5 windows x86 arch:x86

    fe32a0af271757aef62b1b1608a18143


    Headers

    Imports

    Sections

  • wzdesk.exe
    .exe windows:6 windows x64 arch:x64

    08def7a39274c9b45c7fdb455d154592


    Headers

    Imports

    Sections

  • wzdesktop.dll
    .dll windows:6 windows x64 arch:x64

    cc9c86d95e5532ff1ba3fdc7fa7e7f8c


    Headers

    Imports

    Exports

    Sections

  • wztask.ini
  • xypreloadgame.dll
    .dll windows:5 windows x86 arch:x86

    2d44fc73cafaa771ffd8a532d3d77218


    Headers

    Imports

    Sections

  • zhmq.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    bf9dd5dfdcdd67691c400635d57d3924


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • dwjh_wqeqd.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections