General

  • Target

    047cb95963448a8ffeaee1f40f22be6e_JaffaCakes118

  • Size

    7.0MB

  • MD5

    047cb95963448a8ffeaee1f40f22be6e

  • SHA1

    d20271bad47dd4ce6855f9e1956e69a02a4fbe48

  • SHA256

    5f15c3b043ba6af64e0d0665f82ef90cb6b9d3399be47c13678746051c106622

  • SHA512

    7ada52d073e3ac0dd94c87b041cfc8e9a41131cd1b7118b57452d5ab793b50aca86b8612c99909bb36e09c0c1f906bfdfdff4727a19fa4c80414407c3d73b121

  • SSDEEP

    196608:8IYeS/0ECjgmbHoIWrtsNEgwUtfn/4MDQYZm:g/6gmbvN4oDNZm

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 047cb95963448a8ffeaee1f40f22be6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • CheckUpdate19.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/GOLDFISHRED/Default.png
    .png
  • Plugins/GOLDFISHRED/GoldFishRed.xdsSp
  • Plugins/GOLDFISHRED/GoldFishRedLeft.png
    .png
  • Plugins/GOLDFISHRED/GoldFishRedRight.png
    .png
  • Plugins/GOLDFISHRED/Icon.png
    .png
  • Plugins/GOLDFISHRED/Icon_32.png
    .png
  • Plugins/GOLDFISHRED/xwidget.ini
  • Plugins/GoldFishWhite/Default.png
    .png
  • Plugins/GoldFishWhite/GoldFishWhiteLeft.png
    .png
  • Plugins/GoldFishWhite/GoldFishWhiteRight.png
    .png
  • Plugins/GoldFishWhite/GoldFishWhitel.xdsSp
  • Plugins/GoldFishWhite/Icon.png
    .png
  • Plugins/GoldFishWhite/Icon_32.png
    .png
  • Plugins/GoldFishWhite/xwidget.ini
  • Plugins/GoldFishWhite/{34240894-AB6F-420B-BDBA-6493A9F007C3}.xdssp
  • Plugins/JinliRed/Default.png
    .png
  • Plugins/JinliRed/Icon.png
    .png
  • Plugins/JinliRed/Icon_32.png
    .png
  • Plugins/JinliRed/JinliRed.xdsSp
  • Plugins/JinliRed/JinliRedLeft.png
    .png
  • Plugins/JinliRed/JinliRedRight.png
    .png
  • Plugins/JinliRed/xwidget.ini
  • Plugins/NeoFish/Default.png
    .png
  • Plugins/NeoFish/Icon.png
    .png
  • Plugins/NeoFish/Icon_32.png
    .png
  • Plugins/NeoFish/Neofish.xdsSp
  • Plugins/NeoFish/NeofishLeft.png
    .png
  • Plugins/NeoFish/NeofishRight.png
    .png
  • Plugins/NeoFish/xwidget.ini
  • Plugins/º£µ×Ë®²Ý1/Default.png
    .png
  • Plugins/º£µ×Ë®²Ý1/Icon.png
    .png
  • Plugins/º£µ×Ë®²Ý1/Icon_32.png
    .png
  • Plugins/º£µ×Ë®²Ý1/plant1.png
    .png
  • Plugins/º£µ×Ë®²Ý1/plant1.xdsSp
  • Plugins/º£µ×Ë®²Ý1/plant2.png
    .png
  • Plugins/º£µ×Ë®²Ý1/plant2.xdsSp
  • Plugins/º£µ×Ë®²Ý1/xwidget.ini
  • Plugins/º£µ×Ë®ÅÝ/Default.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/Icon.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/Icon_32.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/bolle1.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/bolle1.xdsSp
  • Plugins/º£µ×Ë®ÅÝ/bolle2.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/bolle2.xdsSp
  • Plugins/º£µ×Ë®ÅÝ/pingzi.png
    .png
  • Plugins/º£µ×Ë®ÅÝ/xwidget.ini
  • Plugins/º£µ×Ë®ÅÝ2/Default.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/Icon.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/Icon_32.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/bolle2.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/boxBolle.xdsSp
  • Plugins/º£µ×Ë®ÅÝ2/closed.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/open.png
    .png
  • Plugins/º£µ×Ë®ÅÝ2/xwidget.ini
  • Readme.txt
  • Res/About.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Res/DefaultScriptFile.xdssp
  • Res/GetColor.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Res/GetMoreWidgets.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Res/Icon.png
    .png
  • Res/Icon_32.png
    .png
  • Res/WidgetDownloadTool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Res/about.png
    .png
  • Res/dll/XDeskScripter.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Res/dll/wdgtm.dll
  • Res/selectedbg.png
    .png
  • Res/systray.ico
  • Res/widgetdownload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Res/xdsThemePkg.ico
  • Res/xwidget.ico
  • Skins/default/DefaultIcon.png
    .png
  • Skins/default/barbg_bottom.BMP
  • Skins/default/barbg_bottom_mini.bmp
  • Skins/default/barbg_top.BMP
  • Skins/default/barbg_top_mini.bmp
  • Skins/default/click.wav
  • Skins/default/cross.png
    .png
  • Skins/default/downloadmore.png
    .png
  • Skins/default/manage.png
    .png
  • Skins/default/nextbar.png
    .png
  • Skins/default/open.png
    .png
  • Skins/default/prevbar.png
    .png
  • Skins/default/skin.ini
  • Themes/Default.xdsTheme
  • Themes/Default_wallpaper.jpg
    .jpg
  • Themes/ËùÓÐÓãÀàµÄº£µ×ÊÀ½ç.xdsTheme
  • Themes/ËùÓÐÓãÀàµÄº£µ×ÊÀ½ç_wallpaper.jpg
    .jpg
  • XDeskShow.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • config.ini
  • license.rtf
    .rtf
  • setup_bd.exe
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • setup_cn.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • »¶Ó­·ÃÎÊÓãÓã×ÀÃæº£µ×ÊÀ½çÖ÷Ò³.url
  • Ð¶ÔØ³ÌÐò.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp