General

  • Target
    b6c8ad2f49e3fe9eba546ab1d18bc2f7_JaffaCakes118
  • Size 25.9MB
  • Sample240617-e7s6waydqq
  • SHA256 dbb02d406f383ebc2ec118e012abe2c4efea3a21a30f6e60874fe117e57c7714
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • b6c8ad2f49e3fe9eba546ab1d18bc2f7_JaffaCakes118
    .exe 25.9MB
  • $PLUGINSDIR/BDKVZipRpt.dll
    .dll 224KB
  • $PLUGINSDIR/BDLogicUtils.dll
    .dll 282KB
  • $PLUGINSDIR/BDMFrameWork.dll
    .dll 226KB
  • $PLUGINSDIR/BDMNet.dll
    .dll 974KB
  • $PLUGINSDIR/BDMNetPlus.dll
    .dll 886KB
  • $PLUGINSDIR/BDMPluginMgr.dll
    .dll 758KB
  • $PLUGINSDIR/BDMReport.dll
    .dll 430KB
  • $PLUGINSDIR/BDMReportPlus.dll
    .dll 390KB
  • $PLUGINSDIR/BaiduSdBugRpt.exe
    .exe 707KB
  • $PLUGINSDIR/GetSupplyId.dll
    .dll 108KB
  • $PLUGINSDIR/KVInstallHelper.dll
    .dll 807KB
  • $PLUGINSDIR/Report.dll
    .dll 98KB
  • $PLUGINSDIR/System.dll
    .dll 18KB
  • $PLUGINSDIR/file/AntiExp.dll
    .dll 574KB
  • $PLUGINSDIR/file/BDConfig.dll
    .dll 486KB
  • $PLUGINSDIR/file/BDDownLoadProtectPlugin.dll
    .dll 478KB
  • $PLUGINSDIR/file/BDDownLoadProtectPlugin.xml
    .xml 554B
  • $PLUGINSDIR/file/BDDriverFixer.dll
    .dll 222KB
  • $PLUGINSDIR/file/BDKVRmvDevPlugin.dll
    .dll 406KB
  • $PLUGINSDIR/file/BDKVRmvDevPlugin.xml
    .xml 528B
  • $PLUGINSDIR/file/BDKVTrayTipsPlugin.dll
    .dll 306KB
  • $PLUGINSDIR/file/BDKVTrayTipsPlugin.xml
    .xml 534B
  • $PLUGINSDIR/file/BDKVVirusPlugins.dll
    .dll 262KB
  • $PLUGINSDIR/file/BDKVVirusPlugins.xml
    .xml 525B
  • $PLUGINSDIR/file/BDKitUtils.dll
    .dll 68KB
  • $PLUGINSDIR/file/BDLogicUtils.dll
    .dll 282KB
  • $PLUGINSDIR/file/BDMAVCached.dll
    .dll 382KB
  • $PLUGINSDIR/file/BDMAVE.xml
    .xml 503B
  • $PLUGINSDIR/file/BDMAVEng.dll
    .dll 874KB
  • $PLUGINSDIR/file/BDMAVEng.xml
    .xml 505B
  • $PLUGINSDIR/file/BDMCloudEng.dll
    .dll 338KB
  • $PLUGINSDIR/file/BDMFrameWork.dll
    .dll 226KB
  • $PLUGINSDIR/file/BDMNet.dll
    .dll 974KB
  • $PLUGINSDIR/file/BDMNetPlus.dll
    .dll 886KB
  • $PLUGINSDIR/file/BDMPerfMon.dll
    .dll 218KB
  • $PLUGINSDIR/file/BDMPerfMon.xml
    .xml 509B
  • $PLUGINSDIR/file/BDMPluginMgr.dll
    .dll 758KB
  • $PLUGINSDIR/file/BDMRepBase.dll
    .dll 906KB
  • $PLUGINSDIR/file/BDMRepMgr.dll
    .dll 386KB
  • $PLUGINSDIR/file/BDMReport.dll
    .dll 430KB
  • $PLUGINSDIR/file/BDMReportPlus.dll
    .dll 390KB
  • $PLUGINSDIR/file/BDSandBoxMgrPlugin.xml
    .xml 916B
  • $PLUGINSDIR/file/BDToolBox.dll
    .dll 322KB
  • $PLUGINSDIR/file/BDToolBox.xml
    .xml 534B
  • $PLUGINSDIR/file/BDUDiskGuard.dll
    .dll 190KB
  • $PLUGINSDIR/file/BaiduRepairContainer.xml
    .xml 270B
  • $PLUGINSDIR/file/BaiduSdBugRpt.exe
    .exe 707KB
  • $PLUGINSDIR/file/BavArchive.dll
    .dll 758KB
  • $PLUGINSDIR/file/BavCommon.dll
    .dll 570KB
  • $PLUGINSDIR/file/BavEngine.dll
    .dll 118KB
  • $PLUGINSDIR/file/BavFrame.dll
    .dll 58KB
  • $PLUGINSDIR/file/BavHeur.dll
    .dll 478KB
  • $PLUGINSDIR/file/BavOLE.dll
    .dll 266KB
  • $PLUGINSDIR/file/BavScanH.dll
    .dll 46KB
  • $PLUGINSDIR/file/BavScanM.dll
    .dll 102KB
  • $PLUGINSDIR/file/BavScanV.dll
    .dll 102KB
  • $PLUGINSDIR/file/BavUnpack.dll
    .dll 294KB
  • $PLUGINSDIR/file/BavUpdate.dll
    .dll 330KB
  • $PLUGINSDIR/file/BavUpdate.xml
    .xml 4KB
  • $PLUGINSDIR/file/CompatibilityChecker.dll
    .dll 142KB
  • $PLUGINSDIR/file/CoolyContainer.xml
    .xml 508B
  • $PLUGINSDIR/file/FileMon.dll
    .dll 642KB
  • $PLUGINSDIR/file/FileMon.xml
    .xml 508B
  • $PLUGINSDIR/file/HIPSClient.dll
    .dll 574KB
  • $PLUGINSDIR/file/HIPSClient.xml
    .xml 502B
  • $PLUGINSDIR/file/KavUpdate.dll
    .dll 438KB
  • $PLUGINSDIR/file/LocalPluginInfo.xml
    .xml 8KB
  • $PLUGINSDIR/file/MainframeContainer.xml
    .xml 340B
  • $PLUGINSDIR/file/NewPluginConfig.xml
    .xml 58B
  • $PLUGINSDIR/file/OssToolPlugin.dll
    .dll 402KB
  • $PLUGINSDIR/file/OssToolPlugin.xml
    .xml 685B
  • $PLUGINSDIR/file/PrivacyProtect.dll
    .dll 210KB
  • $PLUGINSDIR/file/PrivacyProtect.xml
    .xml 536B
  • $PLUGINSDIR/file/RtpContainer.xml
    .xml 706B
  • $PLUGINSDIR/file/ToolBoxContainer.xml
    .xml 348B
  • $PLUGINSDIR/file/ToolBoxHelperPlugin.dll
    .dll 42KB
  • $PLUGINSDIR/file/ToolBoxHelperPlugin.xml
    .xml 557B
  • $PLUGINSDIR/file/TrayContainer.xml
    .xml 744B
  • $PLUGINSDIR/file/TrustAndIso.dll
    .dll 322KB
  • $PLUGINSDIR/file/VersionCompatibilityPlugin.dll
    .dll 326KB
  • $PLUGINSDIR/file/VersionCompatibilityPlugin.xml
    .xml 566B
  • $PLUGINSDIR/file/WebSafePlugin.dll
    .dll 1.2MB
  • $PLUGINSDIR/file/WebSafePlugin.xml
    .xml 517B
  • $PLUGINSDIR/file/about.rdb
    15KB
  • $PLUGINSDIR/file/av_main_res.rdb
    816KB
  • $PLUGINSDIR/file/av_theme_res.rdb
    21KB
  • $PLUGINSDIR/file/baidusdRepair.dll
    .dll 264KB
  • $PLUGINSDIR/file/baidusdRepair.xml
    .xml 515B
  • $PLUGINSDIR/file/bdnewsafeplugin.xml
    .xml 514B
  • $PLUGINSDIR/file/bdnewsafesvc.dll
    .dll 42KB
  • $PLUGINSDIR/file/bdnewsafetray.dll
    .dll 42KB
  • $PLUGINSDIR/file/bduf.dll
    .dll 522KB
  • $PLUGINSDIR/file/cache_config.dat
    490B
  • $PLUGINSDIR/file/ccesign.dat
    322KB
  • $PLUGINSDIR/file/color_desc.clr
    829B
  • $PLUGINSDIR/file/common_msg_box_res.rdb
    18KB
  • $PLUGINSDIR/file/config_res.rdb
    264KB
  • $PLUGINSDIR/file/custom_scan_res.rdb
    46KB
  • $PLUGINSDIR/file/download_protect_res.rdb
    138KB
  • $PLUGINSDIR/file/e0000.vdf
    78KB
  • $PLUGINSDIR/file/file_monitor_tips_res.rdb
    48KB
  • $PLUGINSDIR/file/fm.dat
    597B
  • $PLUGINSDIR/file/font_desc.f
    2KB
  • $PLUGINSDIR/file/hips_tips_res.rdb
    23KB
  • $PLUGINSDIR/file/kav_verify.dat
    677B
  • $PLUGINSDIR/file/monitor_config.dat
    559B
  • $PLUGINSDIR/file/oss_tool_res.rdb
    125KB
  • $PLUGINSDIR/file/pullup_weishi_res.rdb
    95KB
  • $PLUGINSDIR/file/rdp_res.rdb
    82KB
  • $PLUGINSDIR/file/recover_mgr_res.rdb
    144KB
  • $PLUGINSDIR/file/sandbox_res.rdb
    213KB
  • $PLUGINSDIR/file/scan_mgr_config.dat
    5KB
  • $PLUGINSDIR/file/scan_res.rdb
    66KB
  • $PLUGINSDIR/file/sh0000.vdf
    7.8MB
  • $PLUGINSDIR/file/sha0000.vdf
    131B
  • $PLUGINSDIR/file/sm0000.vdf
    145KB
  • $PLUGINSDIR/file/sm0001.vdf
    20KB
  • $PLUGINSDIR/file/sm0002.vdf
    3KB
  • $PLUGINSDIR/file/sm0003.vdf
    1KB
  • $PLUGINSDIR/file/sm0004.vdf
    9KB
  • $PLUGINSDIR/file/sm0005.vdf
    1KB
  • $PLUGINSDIR/file/sm0006.vdf
    120KB
  • $PLUGINSDIR/file/sm0007.vdf
    34KB
  • $PLUGINSDIR/file/sm0008.vdf
    7KB
  • $PLUGINSDIR/file/sm0009.vdf
    3KB
  • $PLUGINSDIR/file/sm000A.vdf
    2KB
  • $PLUGINSDIR/file/sm000B.vdf
    1KB
  • $PLUGINSDIR/file/sv0000.vdf
    21KB
  • $PLUGINSDIR/file/systemfile.dat
    3KB
  • $PLUGINSDIR/file/text_cn.str
    7KB
  • $PLUGINSDIR/file/tips.rdb
    5KB
  • $PLUGINSDIR/file/toolbox.rdb
    10KB
  • $PLUGINSDIR/file/traymenu.rdb
    27KB
  • $PLUGINSDIR/file/update_result_res.rdb
    71KB
  • $PLUGINSDIR/file/vatl.msi
    .msi 178KB
  • $PLUGINSDIR/file/vcrt.msi
    .msi 653KB
  • $PLUGINSDIR/file/virus_type.dat
    1KB
  • $PLUGINSDIR/file/websafe_oss.rdb
    181KB
  • $PLUGINSDIR/file/wverify.dat
    2.0MB
  • $PLUGINSDIR/file/{C970C420-6E20-4920-9D20-E5102AEBFB20}.png
    .png 1KB
  • $PLUGINSDIR/res/color_desc.clr
    499B
  • $PLUGINSDIR/res/font_desc.f
    1KB
  • $PLUGINSDIR/res/install_res.rdb
    1.5MB
  • $PLUGINSDIR/res/text_cn.str
    2KB
  • $PLUGINSDIR/skin_engine.dll
    .dll 654KB
  • $_56_/Baidu/BaiduSd/PluginPack/label/{C970C420-6E20-4920-9D20-E5102AEBFB20}.png
    .png 1KB
  • BAV/BavArchive.dll
    .dll 758KB
  • BAV/BavCommon.dll
    .dll 570KB
  • BAV/BavEngine.dll
    .dll 118KB
  • BAV/BavFrame.dll
    .dll 58KB
  • BAV/BavHeur.dll
    .dll 478KB
  • BAV/BavOLE.dll
    .dll 266KB
  • BAV/BavScanH.dll
    .dll 46KB
  • BAV/BavScanM.dll
    .dll 102KB
  • BAV/BavScanV.dll
    .dll 102KB
  • BAV/BavUnpack.dll
    .dll 294KB
  • BAV/BavUpdate.dll
    .dll 330KB
  • BAV/BavUpdate.xml
    .xml 4KB
  • BAV/Database/e0000.vdf
    78KB
  • BAV/Database/sh0000.vdf
    7.8MB
  • BAV/Database/sha0000.vdf
    131B
  • BAV/Database/sm0000.vdf
    145KB
  • BAV/Database/sm0001.vdf
    20KB
  • BAV/Database/sm0002.vdf
    3KB
  • BAV/Database/sm0003.vdf
    1KB
  • BAV/Database/sm0004.vdf
    9KB
  • BAV/Database/sm0005.vdf
    1KB
  • BAV/Database/sm0006.vdf
    120KB
  • BAV/Database/sm0007.vdf
    34KB
  • BAV/Database/sm0008.vdf
    7KB
  • BAV/Database/sm0009.vdf
    3KB
  • BAV/Database/sm000A.vdf
    2KB
  • BAV/Database/sm000B.vdf
    1KB
  • BAV/Database/sv0000.vdf
    21KB
  • BDLogicUtils.dll
    .dll 282KB
  • BDMFrameWork.dll
    .dll 226KB
  • BDMNet.dll
    .dll 974KB
  • BDMNetPlus.dll
    .dll 886KB
  • BDMPluginMgr.dll
    .dll 758KB
  • BDMReport.dll
    .dll 430KB
  • BDMReportPlus.dll
    .dll 390KB
  • BaiduSdBugRpt.exe
    .exe 707KB
  • Skins/Default/about.rdb
    15KB
  • Skins/Default/av_main_res.rdb
    816KB
  • Skins/Default/av_theme_res.rdb
    21KB
  • Skins/Default/color_desc.clr
    829B
  • Skins/Default/common_msg_box_res.rdb
    18KB
  • Skins/Default/config_res.rdb
    264KB
  • Skins/Default/custom_scan_res.rdb
    46KB
  • Skins/Default/download_protect_res.rdb
    138KB
  • Skins/Default/file_monitor_tips_res.rdb
    48KB
  • Skins/Default/font_desc.f
    2KB
  • Skins/Default/hips_tips_res.rdb
    23KB
  • Skins/Default/oss_tool_res.rdb
    125KB
  • Skins/Default/pullup_weishi_res.rdb
    95KB
  • Skins/Default/rdp_res.rdb
    82KB
  • Skins/Default/recover_mgr_res.rdb
    144KB
  • Skins/Default/sandbox_res.rdb
    213KB
  • Skins/Default/scan_res.rdb
    66KB
  • Skins/Default/text_cn.str
    7KB
  • Skins/Default/tips.rdb
    5KB
  • Skins/Default/toolbox.rdb
    10KB
  • Skins/Default/traymenu.rdb
    27KB
  • Skins/Default/update_result_res.rdb
    71KB
  • Skins/Default/websafe_oss.rdb
    181KB
  • bdmantivirus/BDKitUtils.dll
    .dll 68KB
  • bdmantivirus/BDMAVCached.dll
    .dll 382KB
  • bdmantivirus/BDMAVEng.dll
    .dll 874KB
  • bdmantivirus/BDMCloudEng.dll
    .dll 338KB
  • bdmantivirus/BDMPerfMon.dll
    .dll 218KB
  • bdmantivirus/BDMRepBase.dll
    .dll 906KB
  • bdmantivirus/BDMRepMgr.dll
    .dll 386KB
  • bdmantivirus/BDUDiskGuard.dll
    .dll 190KB
  • bdmantivirus/CompatibilityChecker.dll
    .dll 142KB
  • bdmantivirus/KavUpdate.dll
    .dll 438KB
  • bdmantivirus/TrustAndIso.dll
    .dll 322KB
  • bdmantivirus/bduf.dll
    .dll 522KB
  • bdmantivirus/cache_config.dat
    490B
  • bdmantivirus/ccesign.dat
    322KB
  • bdmantivirus/kav_verify.dat
    677B
  • bdmantivirus/monitor_config.dat
    559B
  • bdmantivirus/scan_mgr_config.dat
    5KB
  • bdmantivirus/systemfile.dat
    3KB
  • bdmantivirus/virus_type.dat
    1KB
  • bdmantivirus/wverify.dat
    2.0MB
  • hipsengine/AntiExp.dll
    .dll 574KB
  • hipsengine/BDConfig.dll
    .dll 486KB
  • hipsengine/BDDriverFixer.dll
    .dll 222KB
  • hipsengine/BDLogicUtils.dll
    .dll 158KB
  • hipsengine/bdmantivirus/BDKitUtils.dll
    .dll 68KB
  • hipsengine/systemfile.dat
    3KB
  • plugins/BDDownLoadProtectPlugin/BDDownLoadProtectPlugin.dll
    .dll 478KB
  • plugins/BDDownLoadProtectPlugin/BDDownLoadProtectPlugin.xml
    .xml 554B
  • plugins/BDKVRmvDevPlugin/BDKVRmvDevPlugin.dll
    .dll 406KB
  • plugins/BDKVRmvDevPlugin/BDKVRmvDevPlugin.xml
    .xml 528B
  • plugins/BDKVTrayTipsPlugin/BDKVTrayTipsPlugin.dll
    .dll 306KB
  • plugins/BDKVTrayTipsPlugin/BDKVTrayTipsPlugin.xml
    .xml 534B
  • plugins/BDKVVirusPlugins/BDKVVirusPlugins.dll
    .dll 262KB
  • plugins/BDKVVirusPlugins/BDKVVirusPlugins.xml
    .xml 525B
  • plugins/BDMAVE/BDMAVE.xml
    .xml 503B
  • plugins/BDMAVEng/BDMAVEng.xml
    .xml 505B
  • plugins/BDMPerfMon/BDMPerfMon.xml
    .xml 509B
  • plugins/BDToolBox/BDToolBox.dll
    .dll 322KB
  • plugins/BDToolBox/BDToolBox.xml
    .xml 534B
  • plugins/ContainerConfig/BaiduRepairContainer.xml
    .xml 270B
  • plugins/ContainerConfig/CoolyContainer.xml
    .xml 508B
  • plugins/ContainerConfig/MainframeContainer.xml
    .xml 340B
  • plugins/ContainerConfig/RtpContainer.xml
    .xml 706B
  • plugins/ContainerConfig/ToolBoxContainer.xml
    .xml 348B
  • plugins/ContainerConfig/TrayContainer.xml
    .xml 744B
  • plugins/FileMon/FileMon.dll
    .dll 642KB
  • plugins/FileMon/FileMon.xml
    .xml 508B
  • plugins/FileMon/fm.dat
    597B
  • plugins/HipsClient/HIPSClient.dll
    .dll 574KB
  • plugins/HipsClient/HIPSClient.xml
    .xml 502B
  • plugins/LocalPluginInfo.xml
    .xml 8KB
  • plugins/NewPluginConfig.xml
    .xml 58B
  • plugins/OssToolPlugin/OssToolPlugin.dll
    .dll 402KB
  • plugins/OssToolPlugin/OssToolPlugin.xml
    .xml 685B
  • plugins/PrivacyProtect/PrivacyProtect.dll
    .dll 210KB
  • plugins/PrivacyProtect/PrivacyProtect.xml
    .xml 536B
  • plugins/VersionCompatibilityPlugin/VersionCompatibilityPlugin.dll
    .dll 326KB
  • plugins/VersionCompatibilityPlugin/VersionCompatibilityPlugin.xml
    .xml 566B
  • plugins/WebSafePlugin/WebSafePlugin.dll
    .dll 1.2MB
  • plugins/WebSafePlugin/WebSafePlugin.xml
    .xml 517B
  • plugins/baidusdRepair/baidusdRepair.dll
    .dll 264KB
  • plugins/baidusdRepair/baidusdRepair.xml
    .xml 515B
  • plugins/bdnewsafeplugins/bdnewsafeplugin.xml
    .xml 514B
  • plugins/bdnewsafeplugins/bdnewsafesvc.dll
    .dll 42KB
  • plugins/bdnewsafeplugins/bdnewsafetray.dll
    .dll 42KB
  • plugins/extends/BDSandBoxMgrPlugin.xml
    .xml 916B
  • plugins/toolboxhelperplugin/ToolBoxHelperPlugin.dll
    .dll 42KB
  • plugins/toolboxhelperplugin/ToolBoxHelperPlugin.xml
    .xml 557B
  • vatl.msi
    .msi 178KB
  • vcrt.msi
    .msi 653KB

b6c8ad2f49e3fe9eba546ab1d18bc2f7_JaffaCakes118

  • IMPHASH 32f3282581436269b3a75b6675fe3e08
  • SHA256 dbb02d406f383ebc2ec118e012abe2c4efea3a21a30f6e60874fe117e57c7714
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
1e:a3:8f:55:dc:50:bf:34:88:9a:47:a6:ac:c5:9e:b9:e8:94:2f:2b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Baidu (China) Co.\, Ltd.,O=Baidu (China) Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN
Chains

Jul 1, 2015

Minor OS version
0
Major OS version
5
Entry point
14819
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths