General

  • Target
    18b2c9f1c8d5b803a596fea995b15b4d_JaffaCakes118
  • Size 888KB
  • Sample240628-ejmzyszend
  • SHA256 93bc6d23db7e7e352ffdfcd1e0a05061e0cda36085704b93e90936de1da0bccc
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • 18b2c9f1c8d5b803a596fea995b15b4d_JaffaCakes118
    .exe 888KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/NSISdl.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    47KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/partner.ini
    695B
  • 114la.exe
    .exe 38KB
  • 115br.exe
    .exe 1.6MB
  • IcoCache/116.com_favicon.ico
    1KB
  • IcoCache/search8.taobao.com_favicon.ico
    894B
  • IcoCache/www.baidu.com_favicon.ico
    2KB
  • IcoCache/www.google.com.hk_favicon.ico
    1KB
  • Recent.ini
    113B
  • ThumbnailCache/u.115.com.jpeg
    .jpg 6KB
  • ThumbnailCache/www.114la.com.jpeg
    .jpg 5KB
  • ThumbnailCache/www.915.com.jpeg
    .jpg 6KB
  • ThumbnailCache/www.xiazaiba.com.jpeg
    .jpg 5KB
  • cfg.ini
    169B
  • html/404error.html
    .html .js 3KB
  • html/config.html
    .js 21KB
  • html/error.html
    .html .js 4KB
  • html/last.html
    .html .js 1KB
  • html/start.html
    .html .js 15KB
  • html/static/css/config.css
    6KB
  • html/static/css/last.css
    1KB
  • html/static/css/reset.css
    636B
  • html/static/css/start.css
    8KB
  • html/static/images/115.gif
    .gif 3KB
  • html/static/images/194x136.jpg
    .jpg 1KB
  • html/static/images/baidu.gif
    .gif 2KB
  • html/static/images/c_btn.png
    .png 1KB
  • html/static/images/c_left.png
    .png 12KB
  • html/static/images/c_left_bg.png
    .png 146B
  • html/static/images/c_line.png
    .png 126B
  • html/static/images/c_plug.png
    .png 2KB
  • html/static/images/c_top.png
    .png 3KB
  • html/static/images/google.gif
    .gif 2KB
  • html/static/images/mouse/MouseGesture_0.png
    .png 643B
  • html/static/images/mouse/MouseGesture_1.png
    .png 661B
  • html/static/images/mouse/MouseGesture_10.png
    .png 854B
  • html/static/images/mouse/MouseGesture_11.png
    .png 860B
  • html/static/images/mouse/MouseGesture_12.png
    .png 717B
  • html/static/images/mouse/MouseGesture_13.png
    .png 741B
  • html/static/images/mouse/MouseGesture_14.png
    .png 726B
  • html/static/images/mouse/MouseGesture_15.png
    .png 732B
  • html/static/images/mouse/MouseGesture_16.png
    .png 969B
  • html/static/images/mouse/MouseGesture_17.png
    .png 971B
  • html/static/images/mouse/MouseGesture_18.png
    .png 939B
  • html/static/images/mouse/MouseGesture_19.png
    .png 967B
  • html/static/images/mouse/MouseGesture_2.png
    .png 679B
  • html/static/images/mouse/MouseGesture_3.png
    .png 680B
  • html/static/images/mouse/MouseGesture_4.png
    .png 765B
  • html/static/images/mouse/MouseGesture_5.png
    .png 764B
  • html/static/images/mouse/MouseGesture_6.png
    .png 751B
  • html/static/images/mouse/MouseGesture_7.png
    .png 775B
  • html/static/images/mouse/MouseGesture_8.png
    .png 870B
  • html/static/images/mouse/MouseGesture_9.png
    .png 850B
  • html/static/images/mp3.gif
    .gif 2KB
  • html/static/images/pic.gif
    .gif 2KB
  • html/static/images/s_add.png
    .png 19KB
  • html/static/images/s_bg.png
    .png 261B
  • html/static/images/s_btn.png
    .png 894B
  • html/static/images/s_con.png
    .png 5KB
  • html/static/images/s_form.png
    .png 1KB
  • html/static/images/s_ico.png
    .png 1KB
  • html/static/images/s_ico_bg.png
    .png 425B
  • html/static/images/s_last.png
    .png 2KB
  • html/static/images/s_load.gif
    .gif 21KB
  • html/static/images/s_test_204_127.png
    .png 4KB
  • html/static/images/s_top.png
    .png 218B
  • html/static/images/taobao.gif
    .gif 927B
  • html/static/images/video.gif
    .gif 2KB
  • html/static/images/zhidao.gif
    .gif 2KB
  • html/static/js/suggest.js
    .js 8KB
  • setting.ini
    1KB
  • skin/default/add.png
    .png 452B
  • skin/default/addr_go.png
    .png 2KB
  • skin/default/addr_goframe.png
    .png 316B
  • skin/default/addr_history.png
    .png 248B
  • skin/default/addr_hover_left.png
    .png 363B
  • skin/default/addr_hover_right.png
    .png 338B
  • skin/default/addr_left.png
    .png 333B
  • skin/default/addr_right.png
    .png 339B
  • skin/default/addr_safe.png
    .png 1KB
  • skin/default/addr_stop.png
    .png 2KB
  • skin/default/ani_download.gif
    .gif 1KB
  • skin/default/ani_webfav.gif
    .gif 2KB
  • skin/default/arrow_down.png
    .png 939B
  • skin/default/arrow_up.png
    .png 964B
  • skin/default/bg.png
    .png 450B
  • skin/default/bitmap_fav.bmp
    824B
  • skin/default/bitmap_nodes.bmp
    824B
  • skin/default/bitmap_page.bmp
    824B
  • skin/default/bottom_left.PNG
    .png 194B
  • skin/default/bottom_right.PNG
    .png 194B
  • skin/default/button_bg.png
    .png 768B
  • skin/default/button_close.png
    .png 1KB
  • skin/default/button_maxi.png
    .png 829B
  • skin/default/button_menu_bg.png
    .png 638B
  • skin/default/button_mini.png
    .png 788B
  • skin/default/button_restore.png
    .png 953B
  • skin/default/change_skin.png
    .png 892B
  • skin/default/chevron.png
    .png 988B
  • skin/default/close-tab.png
    .png 514B
  • skin/default/date.png
    .png 462B
  • skin/default/del.png
    .png 423B
  • skin/default/download_close.png
    .png 621B
  • skin/default/edit.png
    .png 559B
  • skin/default/edit_left.png
    .png 246B
  • skin/default/edit_right.png
    .png 258B
  • skin/default/filtrate.png
    .png 566B
  • skin/default/frame_left.png
    .png 117B
  • skin/default/frame_right.PNG
    .png 118B
  • skin/default/loading.png
    .png 1KB
  • skin/default/move_tab.png
    .png 2KB
  • skin/default/no_trace.png
    .png 1KB
  • skin/default/page.png
    .png 433B
  • skin/default/pluginbar_bg.png
    .png 117B
  • skin/default/progress_bg.png
    .png 225B
  • skin/default/progress_fw.png
    .png 196B
  • skin/default/scrollbar_bg.png
    .png 139B
  • skin/default/scrollbar_thumb.png
    .png 551B
  • skin/default/search.png
    .png 376B
  • skin/default/search_botton.png
    .png 694B
  • skin/default/search_choose.png
    .png 167B
  • skin/default/side_band_top_bg.png
    .png 129B
  • skin/default/side_favorite.png
    .png 1KB
  • skin/default/side_grip.png
    .png 139B
  • skin/default/side_history.png
    .png 1KB
  • skin/default/side_leftband.png
    .png 122B
  • skin/default/side_top_bg.png
    .png 163B
  • skin/default/side_top_close.png
    .png 1023B
  • skin/default/side_top_fixed.png
    .png 849B
  • skin/default/side_top_moved.png
    .png 814B
  • skin/default/site.png
    .png 414B
  • skin/default/skin.ini
    737B
  • skin/default/status_bg.png
    .png 163B
  • skin/default/status_curpage.png
    .png 1KB
  • skin/default/status_download.png
    .png 1KB
  • skin/default/status_loading.png
    .png 835B
  • skin/default/status_netuser.png
    .png 1KB
  • skin/default/status_newpage.png
    .png 1KB
  • skin/default/status_nonetuser.png
    .png 1KB
  • skin/default/status_nosound.png
    .png 1KB
  • skin/default/status_ok.png
    .png 675B
  • skin/default/status_sound.png
    .png 1KB
  • skin/default/tab_add.png
    .png 1KB
  • skin/default/tab_all.png
    .png 1KB
  • skin/default/tab_background.png
    .png 164B
  • skin/default/tab_item.png
    .png 1KB
  • skin/default/tab_left.png
    .png 1KB
  • skin/default/tab_right.png
    .png 1KB
  • skin/default/tab_sidebarbutton.png
    .png 1KB
  • skin/default/tool_back.PNG
    .png 4KB
  • skin/default/tool_browsermode.png
    .png 3KB
  • skin/default/tool_forward.PNG
    .png 4KB
  • skin/default/tool_home.PNG
    .png 4KB
  • skin/default/tool_refresh.png
    .png 5KB
  • skin/default/tool_restore.png
    .png 4KB
  • skin/default/tool_showmenu.png
    .png 2KB
  • skin/default/webzoom.png
    .png 760B
  • skin/default/¸ßÁÁ.png
    .png 260B
  • skin/default/»»·ô.png
    .png 892B
  • skin/default/ÉÏ.png
    .png 356B
  • skin/default/ÏÂ.png
    .png 340B
  • uninst.exe.nsis
    5KB

18b2c9f1c8d5b803a596fea995b15b4d_JaffaCakes118

  • IMPHASH 099c0646ea7282d232219f8807883be0
  • SHA256 93bc6d23db7e7e352ffdfcd1e0a05061e0cda36085704b93e90936de1da0bccc
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
1e:da:8f:31:5c:bf:58:63:72:47:e3:3c:f0:ad:f1:be:fc:e3:f0:c6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=广东雨林木风计算机科技有限公司,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=广东雨林木风计算机科技有限公司,L=Dongguan,ST=Guangdong,C=CN
Chains

Oct 25, 2011

Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths