General

  • Target

    02e7edd0dcd15d1aed32c660be30cf8f_JaffaCakes118

  • Size

    1.4MB

  • MD5

    02e7edd0dcd15d1aed32c660be30cf8f

  • SHA1

    8d3c963ad6b30dd6125ddc334588285e076a1c69

  • SHA256

    026a72b219d40eca283523fd5d2b318a0c3547d3203c5ae8234e3d8e028d0d9f

  • SHA512

    d476c25460caf9ffa262624895ed684d558c85f98d405cbe5d337fc92d45f92ed7b77bcf5f17fee494a85ef86185b11d2b8423e7570c264d0691c402b9e35b44

  • SSDEEP

    24576:TMANlQlLSMs2xhcfXeO9v9b7uBF9d515bJiTuYa3Z8kLNbTi6XbTEcBF:T/uLSMfMTFk9dvaTtNkLND/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 02e7edd0dcd15d1aed32c660be30cf8f_JaffaCakes118
    .rar
  • YtRecycle.exe
    .exe windows:4 windows x86 arch:x86

    a23455b2d570c1e80b11b92360e41c00


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • RecycleFile/BaseRun.dll
    .dll windows:5 windows x86 arch:x86

    6be0bf36d1c3fc7d34a1ec50844a1298


    Headers

    Imports

    Exports

    Sections

  • RecycleFile/CndSkin.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    49a2cf9620d17bf5068481ec56a94984


    Headers

    Imports

    Exports

    Sections

  • RecycleFile/CndSkinRes.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    630acc6f999b3bc6a2806bba43c531bb


    Headers

    Imports

    Exports

    Sections

  • RecycleFile/Microsoft.VC90.CRT.manifest
    .xml
  • RecycleFile/Microsoft.VC90.MFC.manifest
    .xml
  • RecycleFile/PreSkinRes.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    630acc6f999b3bc6a2806bba43c531bb


    Headers

    Imports

    Exports

    Sections

  • RecycleFile/YtRcyFle.exe
    .exe windows:5 windows x86 arch:x86

    f1af9738b71fce75db89e60c86abd326


    Headers

    Imports

    Sections

  • RecycleFile/YtUpAst.exe
    .exe windows:5 windows x86 arch:x86

    4b85821eb488d7c6b6a53f76dc98b3e9


    Headers

    Imports

    Sections

  • RecycleFile/fav_369.ico
  • RecycleFile/fav_sdl.ico
  • RecycleFile/fav_yit.ico
  • RecycleFile/import/abase.dll
  • RecycleFile/import/dbase.dll
  • RecycleFile/mfc90.dll
    .dll windows:5 windows x86 arch:x86

    f2d8030f2fb5ae92ea26c320740a673b


    Code Sign

    Headers

    Imports

    Sections

  • RecycleFile/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RecycleFile/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RecycleFile/recyclefhelp.chm
    .chm
  • RecycleFile/xtt/vctemp.xtt
  • UnRecycleFile.exe
    .exe windows:4 windows x86 arch:x86

    a23455b2d570c1e80b11b92360e41c00


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/110.bmp
  • .rsrc/DIALOG/102
  • .rsrc/DIALOG/103
  • .rsrc/DIALOG/104
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/107
  • .rsrc/DIALOG/111
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/MANIFEST/1
    .xml
  • .text
  • 新云软件.url
    .url