General

  • Target

    ab365d31e7e949098d533855500ad28f_JaffaCakes118

  • Size

    4.6MB

  • MD5

    ab365d31e7e949098d533855500ad28f

  • SHA1

    852e65fd92f26fc46a82a3c1d219de7a1c5a0d33

  • SHA256

    b285fe3977d0bd1f5ab5f72021675a5a4e6e4735cdb1d9a798b2baa08b1d7cd9

  • SHA512

    2f6daa54d06787a517e63da80052f2bca9630d670721f57ab2447c1c775475fc2d04cc750596ae3b0fb9b840b16a5a806a6122db68d5f9bd0283cd33ecb233e0

  • SSDEEP

    98304:FywMtxH5fEmDbwyHo2XHotY1hOqGxFamZ4V8UTmex2C6re:FdiH5ckbwyFHotY3DE/oLx6re

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ab365d31e7e949098d533855500ad28f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS7z.dll
    .dll windows:6 windows x86 arch:x86

    c8fc3b55c70f2f31f4c8639bf1efe362


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsCurl.dll
    .dll windows:5 windows x86 arch:x86

    097233e221797962ad16ed8d2fb8d322


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDM.dll
    .dll windows:5 windows x86 arch:x86

    1fbb8b9a2f61b4f10659e43a6aa7527b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsUtil.dll
    .dll windows:5 windows x86 arch:x86

    a0f07045c020774a088cbb7d49e63ff8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/skin.zip
    .zip
  • layout/dmindex.xml
  • layout/xml/dui_install_wnd.xml
  • layout/xml/dui_uninstall_wnd.xml
  • layout/xml/global.xml
  • themes/default/dmindex.xml
  • themes/default/images/bg_installing.png
    .png
  • themes/default/images/label_config.png
    .png
  • themes/default/images/point.png
    .png
  • themes/default/images/progressBar_channel.png
    .png
  • themes/default/images/progressBar_over.png
    .png
  • themes/default/images/shuffling_figure1.png
    .png
  • themes/default/images/shuffling_figure2.png
    .png
  • themes/default/images/shuffling_figure3.png
    .png
  • themes/dmindex.xml
  • Launcher.exe
    .exe windows:5 windows x86 arch:x86

    c1ed88c2b75b04ef00bdb32297a47382


    Code Sign

    Headers

    Imports

    Sections

  • product.7z
    .7z
  • 2.0.1.14/BugReport.exe
    .exe windows:5 windows x86 arch:x86

    49229d9f658144c1ff687d0deb205113


    Code Sign

    Headers

    Imports

    Sections

  • 2.0.1.14/DaemonService.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 2.0.1.14/DmMain.dll
    .dll windows:5 windows x86 arch:x86

    d53b2afc4127d437ececaa1292790596


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/GPBase.dll
    .dll windows:5 windows x86 arch:x86

    4c82a41b200198b144ddb86127f25f49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/GPLogInRes/layout/dmindex.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/LoginError.xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_LoginError.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_LoginMain.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_LoginPicCode.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_LoginingMsgBox.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_QQLoginMain.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_TrayMenu.xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_ie.xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_registermain.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/dui_registermain_higher.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/global.xml
    .xml
  • 2.0.1.14/GPLogInRes/layout/xml/update.xml
    .xml
  • 2.0.1.14/GPLogInRes/themes/dmindex.xml
    .xml
  • 2.0.1.14/GPLogInRes/themes/theme0/dmindex.xml
    .xml
  • 2.0.1.14/GPLogInRes/themes/theme0/image/AccountPullDown.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/CheckBox.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/DropDownCloseBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginBg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginCloseBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginErrBg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginErrCloseBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginHead.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginMinBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/LoginPicCodeInputBg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/MainBgOrangeBottom.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/MenuExit.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/NormalBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/QQLoginBg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/QQLoginCloseBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/QQLoginRefreshBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/RegisterBg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/UsrListDefHead.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/drop_down_box.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/drop_down_box_inner.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/editFrame.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/qqLoginBtn.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/qqRecommend.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/scrollbar.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/update/updatebg.png
    .png
  • 2.0.1.14/GPLogInRes/themes/theme0/image/update/updateloop.gif
    .gif
  • 2.0.1.14/GPLogInRes/themes/theme0/image/yyLoginBtn.png
    .png
  • 2.0.1.14/GPLogin.dll
    .dll windows:5 windows x86 arch:x86

    532476d74ad097ae3f373aed66729cf7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/GPRender.exe
    .exe windows:5 windows x86 arch:x86

    b9eaaba9e82d2687fdfd75522cace939


    Code Sign

    Headers

    Imports

    Sections

  • 2.0.1.14/GPRenderRes/layout/dmindex.xml
    .xml
  • 2.0.1.14/GPRenderRes/layout/xml/global.xml
    .xml
  • 2.0.1.14/GPRenderRes/layout/xml/main.xml
    .xml
  • 2.0.1.14/GPRenderRes/themes/dmindex.xml
    .xml
  • 2.0.1.14/GPRenderRes/themes/theme0/dmindex.xml
    .xml
  • 2.0.1.14/GPRes/layout/config/subtaburls.xml
    .xml
  • 2.0.1.14/GPRes/layout/config/urls.xml
    .xml
  • 2.0.1.14/GPRes/layout/dmindex.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/aboutwnd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/accountmenu.xml
  • 2.0.1.14/GPRes/layout/xml/active_popwnd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/clockadd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/clockmenu.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/clockmod.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/clockpopwnd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/conflitalert.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/dui_ie.xml
  • 2.0.1.14/GPRes/layout/xml/exitmenu.xml
  • 2.0.1.14/GPRes/layout/xml/global.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/main.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/mainmenu.xml
  • 2.0.1.14/GPRes/layout/xml/msgbox.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/quitwnd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/repair.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/repairattention.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/repairprocess.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/repairresult.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/setup.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/update.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/xiaohaoadd.xml
    .xml
  • 2.0.1.14/GPRes/layout/xml/xiaohaomenu.xml
    .xml
  • 2.0.1.14/GPRes/themes/dmindex.xml
    .xml
  • 2.0.1.14/GPRes/themes/theme0/dmindex.xml
    .xml
  • 2.0.1.14/GPRes/themes/theme0/image/AccountButton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/ExitFullScreen.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/FullScreen.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/about/aboutbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/about/aboutclose.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/accountmenu/AccountMenu.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/accountmenu/switchitem.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/activepop/active_bg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/activepop/active_close.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/activepop/active_open.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/alarmClock.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/bg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/cbx_frame.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/clock/clockbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/clock/clockclose.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/clock/clockwarn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/clock/startbtn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/closebutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_cbx_btn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_cbx_listframe.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_checkbox.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_frame.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_lb_scrollbar.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_poplist_scrollbar.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/custom/custom_radiobutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/customService.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/exitmenu.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/gift.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/homePage.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/imlogin.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_4366.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_clock.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_qq.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_setup.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_xiaohao.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/lable_yy.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/listctrlbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/listctrlframe.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/ll.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/login.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/logo.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/mainmenu/aboutitem.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/mainmenu/setupitem.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/maxbutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/minbutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/morebutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/msgbox/gp_closebutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/msgbox/gp_custombutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/msgbox/gp_exclamatory.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/msgbox/gp_msgbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/narrowbutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_btn_delete.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_btn_edit.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_btn_enter.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_combo_btn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_combo_edit.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_combo_list.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_listbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/pop_subtabitem.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/popbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/popbottom.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/popbtn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/popclose.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/quit/quitbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/quit/quitcheck.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/quit/quitclose.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/quit/quitstay.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/recharge.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/renovate.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/correct.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/incorrect.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/progressbar.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/progressbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairattentionbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairbtn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repaircancelbtn.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairico.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairprocessbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/repair/repairresultbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/restorebutton.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/setup_tabitem.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/setupbg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/stop.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/loading.gif
    .gif
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/subtab_deficon.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/subtab_home.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/subtab_hozx.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/subtab_lbzx.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/subtab_pageicon.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/tab_close.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/tabctrl/tab_skin.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/update/updatebg.png
    .png
  • 2.0.1.14/GPRes/themes/theme0/image/update/updateloop.gif
    .gif
  • 2.0.1.14/GPRes/themes/theme0/image/xiaoHao.png
    .png
  • 2.0.1.14/GPlatform.exe
    .exe windows:5 windows x86 arch:x86

    4c7698b496c399eac371418cc5092fda


    Code Sign

    Headers

    Imports

    Sections

  • 2.0.1.14/IPC.dll
    .dll windows:5 windows x86 arch:x86

    0a6ad7dab921d2cb8becdc8c081be9d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/Launcher.exe
    .exe windows:5 windows x86 arch:x86

    c1ed88c2b75b04ef00bdb32297a47382


    Code Sign

    Headers

    Imports

    Sections

  • 2.0.1.14/TaskModuleHttp.dll
    .dll windows:5 windows x86 arch:x86

    749307366f91665c548ab3cd70555335


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/Update.exe
    .exe windows:5 windows x86 arch:x86

    bf9b231658b4b5264cef77816c543b72


    Code Sign

    Headers

    Imports

    Sections

  • 2.0.1.14/Update.ini
  • 2.0.1.14/UpdateClient.dll
    .dll windows:5 windows x86 arch:x86

    c49579f5fb4e70aa7baf44d4c694e3f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/crashreport.dll
    .dll windows:5 windows x86 arch:x86

    4d529ae90ba69a9efaf7c0e1eae4d8e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/flash.xml
    .xml
  • 2.0.1.14/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2.0.1.14/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections