General

  • Target

    b15bbdbc7449168324e43d00f0b7aeb0_JaffaCakes118

  • Size

    5.6MB

  • MD5

    b15bbdbc7449168324e43d00f0b7aeb0

  • SHA1

    2b0f5ca101aafecdb492b2c1e82531a6681a0f97

  • SHA256

    1785697c22c7b644f403622d202ea82de7ce2171a7b9eabe050a1726d4103b7c

  • SHA512

    35e0bfc72268b10c28270b8818fd707e13f08b8b9d879336afe4d02127aaf440eb132067aa49fc5962cf3c2e3130dc0493f715546c2c318f9e46ef3a759bc555

  • SSDEEP

    98304:HKIwIi4k5AQH08+GRXcxObdF2rOtcvw+3iHNu2VYc9L2oU+FFO+3B08Go/DKeq:HKIw0kTPxRXcxOH2atcvnCNu2/QoUyfK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • b15bbdbc7449168324e43d00f0b7aeb0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CAILONG/BLOCK/BLOCK.DEF
  • CAILONG/BLOCK/BLOCKS.DBF
  • CAILONG/BLOCK/BLOCKS.cdx
  • CAILONG/BLOCK/BLOCKS.fpt
  • CAILONG/BLOCK/CustomIndex.ini
  • CAILONG/BLOCK/EAGLEDBF.cdx
  • CAILONG/BLOCK/eagledbf.dbf
  • CAILONG/C4dll.dll
    .dll windows:4 windows x86 arch:x86

    0fbfc1794b70c4c57ad56ec18f642486


    Headers

    Imports

    Exports

    Sections

  • CAILONG/DLL/cl.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CAILONG/DLL/nk.dll
    .dll windows:4 windows x86 arch:x86

    a9ab66553d12f2f86f02aff1d8f717ac


    Headers

    Imports

    Exports

    Sections

  • CAILONG/ICONFIG.Ini
  • CAILONG/IPTable.dbf
  • CAILONG/SYS/BASE.FIN
  • CAILONG/SYS/CONDITION.FUT
  • CAILONG/SYS/CONDITION.STK
  • CAILONG/SYS/USER.wfn2
  • CAILONG/SYS/tod.txt
  • CAILONG/SkyCHT.dll
    .dll windows:5 windows x86 arch:x86

    29d7970b3093c3b24723a5ca11d04abb


    Headers

    Imports

    Exports

    Sections

  • CAILONG/SkyEng.dll
    .dll windows:5 windows x86 arch:x86

    f858bec83f4c54c7a57b75ff83bc9e97


    Headers

    Imports

    Exports

    Sections

  • CAILONG/URL.txt
  • CAILONG/USERS/BMP/ts.bmp
  • CAILONG/USERS/BMP/ts2.bmp
  • CAILONG/USERS/C.ini
  • CAILONG/USERS/C2.ini
  • CAILONG/USERS/C3.ini
  • CAILONG/USERS/OPTION.DAT
  • CAILONG/USERS/WAV/2-1mr.wav
  • CAILONG/USERS/WAV/3-1mr.wav
  • CAILONG/USERS/WAV/alert.WAV
  • CAILONG/USERS/WAV/jiacang.wav
  • CAILONG/USERS/WAV/jiancang.wav
  • CAILONG/USERS/WAV/kd.wav
  • CAILONG/USERS/WAV/keyimc.wav
  • CAILONG/USERS/WAV/keyimr.wav
  • CAILONG/USERS/WAV/kk.wav
  • CAILONG/USERS/WAV/lcduo.wav
  • CAILONG/USERS/WAV/lckong.wav
  • CAILONG/USERS/WAV/maichu.wav
  • CAILONG/USERS/WAV/mairu.wav
  • CAILONG/USERS/WAV/pd.wav
  • CAILONG/USERS/WAV/pk.wav
  • CAILONG/USERS/WAV/quancangmr.wav
  • CAILONG/USERS/WAV/xiangshangtz.wav
  • CAILONG/USERS/WAV/xiangxiatz.wav
  • CAILONG/Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • CAILONG/ZipArchive.dll
    .dll windows:5 windows x86 arch:x86

    5312d15a3a5bc828586e00aff9b4ca88


    Headers

    Imports

    Exports

    Sections

  • CAILONG/f10.ini
  • CAILONG/help_big5.txt
  • CAILONG/help_chs.txt
  • CAILONG/iSky2008.exe
    .exe windows:5 windows x86 arch:x86

    af39edc19f2265fe2c0660073417a7c1


    Headers

    Imports

    Sections

  • CAILONG/ie.ico
  • CAILONG/jiu.ico
  • CAILONG/jiucuo.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CAILONG/sky2000.ico
  • CAILONG/sky2000.jpg
    .jpg
  • CAILONG/sky2000_big5.xml
    .xml
  • CAILONG/sky2000_chs.xml
    .xml
  • CAILONG/skyUpdate2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    1d4861d221b6c3ba15866b549befc79a


    Headers

    Imports

    Exports

    Sections

  • CAILONG/unsetup.ico
  • CAILONG/vic32.dll
    .dll windows:4 windows x86 arch:x86

    bccc9c2414227ee28e93b13aaa9d5180


    Headers

    Imports

    Exports

    Sections

  • CAILONG/xieyi.htm
    .html