General

  • Target

    72dac225a9f01d22c5eaec4cc5082793_JaffaCakes118

  • Size

    23.2MB

  • MD5

    72dac225a9f01d22c5eaec4cc5082793

  • SHA1

    1a4b765e24607d9d9229b85d2680c5c5c7401cba

  • SHA256

    e44c03c2db5b94cf96fb6fe4aa1c77b04540a2adec2bf8873ba8c5f19f02b83c

  • SHA512

    cd316ae0b599b0b1b601206ef164e7e19d5390f3aa961497860cfd015c79628355502a44aebd9593d0e1a4c94a63c617d4a55410132b8cd3ca5daae33e08508d

  • SSDEEP

    393216:hQ0evbIaBat5Pv5inmolWuudqWgIFKMXb/aGr0PB+j38UeuNM4RlcY5Xhy4qPMWc:h6vbZBat9RSDkuEoIkMLRrqC8puNMOlH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 72dac225a9f01d22c5eaec4cc5082793_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DialogBk.dll
    .dll windows:4 windows x86 arch:x86

    ca9f1b878c7f5aeb01c3f5807dc45da9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    884fb669714cf7109d8360f139096c69


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/AudioCodec2.dll
    .dll windows:5 windows x86 arch:x86

    96245bba71baf63ddaf8532f60fa69f8


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/AudioCodec3.dll
    .dll windows:5 windows x86 arch:x86

    8bb4c3bcf43e6c2d8f508507020168b3


    Headers

    Imports

    Sections

  • GuaGuaCJ/AudioDecodec3.dll
    .dll windows:5 windows x86 arch:x86

    4b85616306397737b4dcba20d0f29a09


    Headers

    Imports

    Sections

  • GuaGuaCJ/CJ.ico
  • GuaGuaCJ/ChatCostomPost.dll
    .dll windows:4 windows x86 arch:x86

    b3e76b3e790ff2a2201b019fcc49797d


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/ChatHall.exe
    .exe windows:4 windows x86 arch:x86

    502adeb93a5c86e01978c177c447ce13


    Code Sign

    Headers

    Imports

    Sections

  • GuaGuaCJ/ChatHall.ini
  • GuaGuaCJ/ChatRTI.dll
    .dll windows:4 windows x86 arch:x86

    ad0a0ee0440dd8be4b54b8c9b3af774b


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/ChatRoomUI.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    135cc4765d434b7922f2bb51b73648fc


    Headers

    Imports

    Exports

    Sections

  • GuaGuaCJ/NoahRoom/Skin/ChatFrame.ico
  • GuaGuaCJ/NoahRoom/Skin/FnncFrame.ico
  • GuaGuaCJ/Skin/ChatFrame.ico
  • GuaGuaCJ/Skin/FnncFrame.ico