General

  • Target

    aadfd9f322ba0dbd314c98e50c897427_JaffaCakes118

  • Size

    1.4MB

  • MD5

    aadfd9f322ba0dbd314c98e50c897427

  • SHA1

    856c227c0c3301cd2e8576e4130e0817da94f02a

  • SHA256

    f048d6c021a1f189e86a0bb99b5010c3b43c7ca326e6f7aef1ef85c56060ff6f

  • SHA512

    2c43f173640003a569b6d5cb0dee240031a112868e6d33cd642f5fa25dd205972e3ad9340dc084b8ee4b2c5b4842b2ad26cf822ceb6af6bf6ca1b68f07070a88

  • SSDEEP

    24576:58QmqMQVIDKEDUmVcZqefKc54Aw28oSAP7zxBUxdbtJKLXceNRzzPji0dpnKMJLv:uQ1VIEiczxVAoSA/xB4KA4yExjLv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • aadfd9f322ba0dbd314c98e50c897427_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b1a57b635b23ffd553b3fd1e0960b2bd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    bf9dd5dfdcdd67691c400635d57d3924


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • douyou_duan-qzd.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    b4b50f01529bb76779ed95a70fbeb1eb


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    84cd1ddf0ce9c6a74d331bc445074f42


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections