General

  • Target

    150471d6990312c802a4683731f81870_JaffaCakes118

  • Size

    11.1MB

  • MD5

    150471d6990312c802a4683731f81870

  • SHA1

    6ecedbdb21064a1922f42fbed809ebe1e6124771

  • SHA256

    efeae8bae5769ff1413aec946d3f0c36bd6a24373417e28aaef95b178a7a30d0

  • SHA512

    62cd0ffd15ced8666ba9deb32d633648132300e3ba12d6d802ed7dbe9e100296e656b284785d103d473ef4c57d29f96e2e9d6f1549c2ed4bb87d1cb28a611601

  • SSDEEP

    196608:Eyu41CqWebSR5p1jRzaKqynB6DklT3WA6R1o1Lb4JgXP1L6STUcsN8in3D/lzzxB:L1CqWjp7Wz8VlTmhLoZmq1+STs8in3jB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 150471d6990312c802a4683731f81870_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Internet.dll
    .dll windows:4 windows x86 arch:x86

    04281f88c3d826e409dc7c24629e7efc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Timeout.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ad.gif
    .gif
  • $PLUGINSDIR/bg.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsplugin.dll
    .dll windows:4 windows x86 arch:x86

    214e6840266876a8fd4e8310469c01cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • 360sdEng.cab
    .7z
  • 360Pack.dll
    .dll windows:4 windows x86 arch:x86

    35e7d02548001250037df5fb457bbf84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360QBack/BackDsk.dat
    .xml
  • 360QBack/BackIE.dat
    .xml
  • 360QBack/BackRun.dat
    .xml
  • 360QBack/QuickBack.dat
    .xml
  • 360Quart.exe
    .exe windows:4 windows x86 arch:x86

    0abd156d002b3ae14be7ec7dd2654900


    Code Sign

    Headers

    Imports

    Sections

  • 360ave.def
  • 360nzp.dll
    .dll windows:4 windows x86 arch:x86

    cccd758235337e2e5320108ff1254bf1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360sd.dat
  • AVEI.dll
    .dll windows:5 windows x86 arch:x86

    dec4767491dedbcf3145152c6b5ab511


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AVEngine.dll
    .dll windows:5 windows x86 arch:x86

    155fb92d7cbe6653e0ecee2f3b019b3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hookport.sys
    .sys windows:5 windows x86 arch:x86

    6e0d692ecd60190f19618b42cd7a340a


    Code Sign

    Headers

    Imports

    Sections

  • MbrScan.dll
    .dll windows:4 windows x86 arch:x86

    0edc59317adcc56c55831f28f024302e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QuickRule.dll
    .dll windows:4 windows x86 arch:x86

    afee8733b37742c18e934ebadc501501


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SDPlugin/Sola.dll
    .dll windows:4 windows x86 arch:x86

    9d649dcda37df66793b9939d588d5968


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UpTip.dat
  • UpTip.exe
    .exe windows:4 windows x86 arch:x86

    77feb7fb3038babe1a442f11043b5eaa


    Code Sign

    Headers

    Imports

    Sections

  • arfp.db
  • deepscan/360MalwareSection.dll
    .dll windows:4 windows x86 arch:x86

    9f3aa70b40b6fbb0a8c2e5f1729bdece


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/360upk.dll
    .dll windows:5 windows x86 arch:x86

    2ce836a986ba8d86a2b4374a5875ae5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/360verify.dll
    .dll windows:4 windows x86 arch:x86

    ce928fde4597fcf5a0df8d3d7203f05e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/BAPI.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3c4348cd4fe041ba2fbe4804092e8dd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/BAPIDRV.sys
    .sys windows:5 windows x86 arch:x86

    051ba75e0ce44bfe373254bbd9b35b24


    Code Sign

    Headers

    Imports

    Sections

  • deepscan/CQhCltHttpW.dll
    .dll windows:4 windows x86 arch:x86

    886770578fd13c1cb53e532d6d513b86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/CloudEngine.dll
    .dll windows:4 windows x86 arch:x86

    77dda875bd7e5d90aad0a8fb74d640ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/DSFScan.dll
    .dll windows:4 windows x86 arch:x86

    d467967a89dd697bc0662c5ed3daaab0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/DsSysRepair.dll
    .dll windows:5 windows x86 arch:x86

    6119f58855a457c3053668813bc117c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/Qshield.dat
  • deepscan/deepscan.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a9fe8e03b831450168f857c64b7ef119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/dsbs.dat
  • deepscan/dscon.dat
  • deepscan/dsr.dat
  • deepscan/dswc.dat
  • deepscan/dsws.dat
  • deepscan/dswtb.dat
  • deepscan/sc.con
  • deepscan/softcheck.dll
    .dll windows:4 windows x86 arch:x86

    df697c414835e7e42b271d09174e41f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/ssr.dat
  • deepscan/sysfilerepS.dll
    .dll windows:4 windows x86 arch:x86

    35551a3f34893fab65e207a376e72619


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dep360.ini
  • libsdi.dat
  • libvi.dat
  • libwhite.dat
  • model/malware.00.mdf
  • model/malware.01.mdf
  • model/malware.02.mdf
  • model/malware.03.mdf
  • model/malware.04.mdf
  • model/malware.05.mdf
  • model/malware.06.mdf
  • model/malware.07.mdf
  • model/malware.08.mdf
  • model/malware.09.mdf
  • model/malware.10.mdf
  • model/malware.11.mdf
  • model/malware.12.mdf
  • model/malware.13.mdf
  • model/malware.14.mdf
  • model/malware.15.mdf
  • model/malware.16.mdf
  • model/malware.17.mdf
  • model/malware.18.mdf
  • model/malware.19.mdf
  • model/malware.20.mdf
  • model/malware.21.mdf
  • model/malware.22.mdf
  • model/malware.23.mdf
  • model/malware.24.mdf
  • model/malware.25.mdf
  • model/malware.26.mdf
  • model/malware.27.mdf
  • model/malware.28.mdf
  • model/malware.29.mdf
  • model/malware.30.mdf
  • model/malware.31.mdf
  • model/malware.32.mdf
  • model/malware.33.mdf
  • model/malware.34.mdf
  • model/malware.35.mdf
  • model/malware.36.mdf
  • model/malware.37.mdf
  • model/malware.38.mdf
  • model/malware.39.mdf
  • model/malware.40.mdf
  • model/update.txt
  • qrlist.cab
    .cab
  • plist.rdf
  • qutmipc.sys
    .sys windows:5 windows x86 arch:x86

    45b7190878d283d25d0f338b7ad70b71


    Code Sign

    Headers

    Imports

    Sections

  • savapi/AVPack.dll
    .dll windows:5 windows x86 arch:x86

    8e0d832d7cebf7763130404c4e78196c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sdrunchk.ini
  • sdsp/360procmon.dll
    .dll windows:4 windows x86 arch:x86

    85a5957d03e55d89de3999a70eaf54eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sdsp/EfiProc.dll
    .dll windows:4 windows x86 arch:x86

    8a13fb436dc19f441577e082e8d99c0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sdsp/SelfProtectAPI2.dll
    .dll windows:4 windows x86 arch:x86

    050704d7de5198d5748462bc0947cd65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360sdUI.cab
    .7z
  • 360AvFlt.dll
    .dll windows:6 windows x86 arch:x86

    774e01f1b56b60e2cc1015b72c661386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360AvFlt.sys
    .sys windows:6 windows x86 arch:x86

    393d86ed0fd9da6a9e050acc262edab1


    Code Sign

    Headers

    Imports

    Sections

  • 360P2SP.dll
    .dll windows:5 windows x86 arch:x86

    0d3a24cd5d4721c891f3a131f13c4d7c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360QBack.exe
    .exe windows:5 windows x86 arch:x86

    1aeefac19e5964df1fa0a1a1078f020b


    Code Sign

    Headers

    Imports

    Sections

  • 360QVM.dll
    .dll windows:5 windows x86 arch:x86

    0ffcd1ce0fd9fc20e42f986a1f4fd1f1


    Headers

    Imports

    Exports

    Sections

  • 360SignCheck.dll
    .dll windows:4 windows x86 arch:x86

    a83805f65409e7010950e0d8ec89cc2c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360net.dll
    .dll windows:4 windows x86 arch:x86

    082629bc04551ec43d93670d1f71e2f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360rp.dll
    .dll windows:4 windows x86 arch:x86

    1b8d1689b6b8e37872aa51a897a2b9bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360rp.exe
    .exe windows:4 windows x86 arch:x86

    641e101b97f1f0f757966c8361c88117


    Code Sign

    Headers

    Imports

    Sections

  • 360rps.exe
    .exe windows:4 windows x86 arch:x86

    d76b0e5a88f7a4fe7a2d2218024bf3d0


    Code Sign

    Headers

    Imports

    Sections

  • 360sd.dll
    .dll windows:4 windows x86 arch:x86

    98c68cb31186e6f9b7050502d7a695a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360sd.exe
    .exe windows:4 windows x86 arch:x86

    a33856e23a0f949eeae7f8b41cf2a5e3


    Code Sign

    Headers

    Imports

    Sections

  • 360sdrun.exe
    .exe windows:4 windows x86 arch:x86

    71a1d17bf4a5e2c01dd332b82c76ac21


    Code Sign

    Headers

    Imports

    Sections

  • 360sdupd.exe
    .exe windows:4 windows x86 arch:x86

    4cafafadd12d9b5f4cc067a2c4b17750


    Code Sign

    Headers

    Imports

    Sections

  • 360verify.dll
    .dll windows:4 windows x86 arch:x86

    ce928fde4597fcf5a0df8d3d7203f05e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AVLib.dat
  • Banklist/caifutong.png
    .png
  • Banklist/gongshangyinhang.png
    .png
  • Banklist/gouwufanli.png
    .png
  • Banklist/jiansheyinhang.png
    .png
  • Banklist/kuaiqian.png
    .png
  • Banklist/shoujichongzhi.png
    .png
  • Banklist/tuangou.png
    .png
  • Banklist/zhaoshangyinhang.png
    .png
  • Banklist/zhifubao.png
    .png
  • CrashReport.dll
    .dll windows:4 windows x86 arch:x86

    82e26c2c1f16c0494816956bd4cf31a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DataDriv.dat
  • LiveUpd360.dll
    .dll windows:5 windows x86 arch:x86

    9958feebd8186556f36ddefe5ac77b8f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MenuEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3d7443bbd0dd6e687a34c9466ee16ce5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PDown.dll
    .dll windows:5 windows x86 arch:x86

    884eb018169b85e1a3830e3dd281d0fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QTQuart.dll
    .dll windows:4 windows x86 arch:x86

    11a62039fda623fdf02bcf774c334ca4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QuickBack.dll
    .dll windows:5 windows x86 arch:x86

    9a6140356301b26c26dcc333668c884a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Router.dll
    .dll windows:4 windows x86 arch:x86

    7626a30136015dfa28e310b0acc12aa1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SDSkin/360QBack.uic
  • SDSkin/Default.uic
  • SDVersion.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Safelive.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    084454bb75d43670d62a78ddde2689b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tools/360FirstAD.png
    .png
  • Tools/360SandBox.png
    .png
  • Tools/360SoftMgr.png
    .png
  • Tools/AutoRun.png
    .png
  • Tools/FileSmash.png
    .png
  • Tools/LSPFix.png
    .png
  • Tools/NetConnectMgr.png
    .png
  • Tools/QuickBack.png
    .png
  • Tools/RubbishClean.png
    .png
  • Tools/SysProcessMgr.png
    .png
  • Tools/netfos.png
    .png
  • WscControl.exe
    .exe windows:5 windows x86 arch:x86

    607263ad383345e32fac01f024ce9fec


    Code Sign

    Headers

    Imports

    Sections

  • avcheck.dll
    .dll windows:4 windows x86 arch:x86

    97642af84990ecbf40d359b5917c8c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • banklist.dat
  • deepscan/cloudcom2.dll
    .dll windows:4 windows x86 arch:x86

    72fa5e10f3d7e5c2fd7157937e9900d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/cloudsec2.dll
    .dll windows:4 windows x86 arch:x86

    4b5b5b4058428d219d69f251c648bfcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deepscan/heavygate.dll
    .dll windows:4 windows x86 arch:x86

    37882347956cddf77833c9242f66a91b


    Headers

    Imports

    Exports

    Sections

  • dep360.exe
    .exe windows:4 windows x86 arch:x86

    36c527b29ce4ada2163fae24a42ac789


    Code Sign

    Headers

    Imports

    Sections

  • immplugin/DllHijack.dat
  • immplugin/Dllhijack.dll
    .dll windows:4 windows x86 arch:x86

    ff2be6223997367cb13fb383baead2d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • immplugin/LockAcad.dll
    .dll windows:4 windows x86 arch:x86

    c3df5c59ec2cbc8df27ba48a2898fe37


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • immplugin/PopTrojan.dat
  • immplugin/PopTrojan.dll
    .dll windows:4 windows x86 arch:x86

    ce702a00ec19d9cf8dc9ee68ce8f86ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • listpredef.dat
  • pluginmgr.dll
    .dll windows:4 windows x86 arch:x86

    6fd22d6545e5d3e1d2458e5d77a40424


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • repair.exe
    .exe windows:4 windows x86 arch:x86

    3c15eeec88dd5c51009f5e9ca41fc069


    Code Sign

    Headers

    Imports

    Sections

  • synccomps.xml
  • tools.dat
  • tszbr.dll
    .dll windows:4 windows x86 arch:x86

    01983bc2ec7519d2dc269d8b3b8df70f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360sdproc.dat
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    25bcc7010e8e7f0e059da50586853709


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • customskin3/thumb.png
    .png
  • customskin3/thumb_mini.png
    .png
  • dep360.ini
  • savapi/url_count.txt
  • savapi/wdbqvm.wl
  • sdinst360.exe
    .exe windows:4 windows x86 arch:x86

    517c7ff9dbe37149966ea18cf2d03f1f


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe.nsis